shell-hack
Tribute to Chinese ant sword；
A Powerful terminal based webshell controller；
Usage :
Usage :
python3 shell-hack.py --url [URL] --way [METHOD] --pwd[AUTH]
python3 shell-hack.py --shell create --pwd [AUTH]
(Generate kill free webshell)
Example :
python3 shell-hack.py --url http://challenge-d1e1be944a48fd8c.sandbox.ctfhub.com:10800/backdoor/ --way post --pwd ant
Author :
s1mple-SUer QQ:3513582223 Wei:w_s1mple
If you have connected to webshell：
===>get info(get the information from server)
===>bypass(see the bypass ways)
===>readfile(read the file from server)
===>downfile(download file from server)
===>reshell(Have a rebound shell)
===>portscan(scan the port from server)
===>mysql(connect to the mysql and Execute SQL code)
Installation:
git clone https://github.com/s1mple-top/shell-hack
cd shell-hack
python3 shell-hack.py
Compatibility :
Enviroment :
Attacker :
Linux;macos;windows;Unix-like
python3(My Python version 3.8.2)
Attacked server：The best state is linux or unix-like; there will be some restrictions under windows
Realize function
1. Generate a kill free shell; (it is not ruled out that some cannot be exceeded. 2. Automatically bypass the restrictions according to the system restrictions to read files; 3. Obtain probe execution commands; 4. Automatically spy and automatically select available functions for execution; 5. Database connection operation; 6. Obtain sensitive information on the server; 7. One click rebound shell; 8. Download files; 9. Scan ports; 10. Bypass deep-seated disable_functions
Operation effect diagram：
Effect drawing of initial operation：
Connection success effect：
bypass some disable_functions:（Full automatic bypass）
Connect to the mysql:
reshell:
Contributors:
s1mple from SU;
remarks：
Tools are always tools, which will have some limitations; If you want to better learn security knowledge, you need to understand the vulnerability principle and trigger mechanism; Tools are only used by the supplier; Should not rely on;
importance：
Note that this script is not for the services enabled by phpstudy, because the local php environment is required to get the version at the beginning, otherwise an error will be reported; The phpstudy cannot use the local terminal to execute php -v；Fortunately, almost no problem or actual environment runs on phpstudy；In addition, this script is somewhat limited in its function under windows
15 Mar 17, 2022
3 Dec 30, 2021
7 Nov 24, 2022
3 Feb 03, 2022
8 Jan 03, 2023
24 Nov 14, 2022
20 Dec 13, 2022
315 Dec 28, 2022
224 Aug 05, 2022
77 Dec 06, 2022
25 May 10, 2022
559 Jan 03, 2023
2.7k Jan 09, 2023
25 Nov 15, 2022
59 Dec 01, 2022
8 Aug 04, 2022
20 Apr 07, 2022
191 Dec 22, 2022
81 Dec 20, 2022
17 Dec 20, 2021