# phpsploit
**Repository Path**: chenjiew/phpsploit
## Basic Information
- **Project Name**: phpsploit
- **Description**: 过狗马生成
- **Primary Language**: Unknown
- **License**: GPL-3.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No
## Statistics
- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-08-31
- **Last Updated**: 2020-12-19
## Categories & Tags
**Categories**: Uncategorized
**Tags**: None
## README
Full-featured C2 framework which silently persists on
webserver via polymorphic PHP oneliner
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
#### Overview
The obfuscated communication is accomplished using HTTP headers under
standard client requests and web server's relative responses, tunneled
through a tiny **polymorphic backdoor**:
```php
```
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
#### Quick Start
```sh
git clone https://github.com/nil0x42/phpsploit
cd phpsploit/
pip3 install -r requirements.txt
./phpsploit --interactive --eval "help help"
```
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
#### Features
- **Efficient**: More than 20 plugins to automate privilege-escalation tasks
- Run commands and browse filesystem, bypassing PHP security restrictions
- Upload/Download files between client and target
- Edit remote files through local text editor
- Run SQL console on target system
- Spawn reverse TCP shells
- **Stealth**: The framework is made by paranoids, for paranoids
- Nearly invisible by log analysis and NIDS signature detection
- Safe-mode and common _PHP security restrictions bypass_
- Communications are hidden in HTTP Headers
- Loaded payloads are obfuscated to _bypass NIDS_
- http/https/socks4/socks5 **Proxy support**
- **Convenient**: A robust interface with many crucial features
- Detailed help for any option (`help` command)
- _Cross-platform_ on both client and server.
- CLI supports auto-completion & multi-command
- Session saving/loading feature & persistent history
- Multi-request support for large payloads (such as uploads)
- Provides a powerful, highly configurable settings engine
- Each setting, such as user-agent has a _polymorphic mode_
- Customisable environment variables for plugin interaction
- Provides a complete plugin development API
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
#### Supported platforms (as attacker):
- GNU/Linux
- Mac OS X
#### Supported platforms (as target):
- GNU/Linux
- BSD-like
- Mac OS X
- Windows NT
## Contributors
Thanks goes to these wonderful people ([emoji key](https://github.com/all-contributors/all-contributors#emoji-key)):
This project follows the [all-contributors](https://github.com/all-contributors/all-contributors) specification. Contributions of any kind welcome
