shell-hack
Tribute to Chinese ant sword；
A Powerful terminal based webshell controller；
Usage :
Usage :
python3 shell-hack.py --url [URL] --way [METHOD] --pwd[AUTH]
python3 shell-hack.py --shell create --pwd [AUTH]
(Generate kill free webshell)
Example :
python3 shell-hack.py --url http://challenge-d1e1be944a48fd8c.sandbox.ctfhub.com:10800/backdoor/ --way post --pwd ant
Author :
s1mple-SUer QQ:3513582223 Wei:w_s1mple
If you have connected to webshell：
===>get info(get the information from server)
===>bypass(see the bypass ways)
===>readfile(read the file from server)
===>downfile(download file from server)
===>reshell(Have a rebound shell)
===>portscan(scan the port from server)
===>mysql(connect to the mysql and Execute SQL code)
Installation:
git clone https://github.com/s1mple-top/shell-hack
cd shell-hack
python3 shell-hack.py
Compatibility :
Enviroment :
Attacker :
Linux;macos;windows;Unix-like
python3(My Python version 3.8.2)
Attacked server：The best state is linux or unix-like; there will be some restrictions under windows
Realize function
1. Generate a kill free shell; (it is not ruled out that some cannot be exceeded. 2. Automatically bypass the restrictions according to the system restrictions to read files; 3. Obtain probe execution commands; 4. Automatically spy and automatically select available functions for execution; 5. Database connection operation; 6. Obtain sensitive information on the server; 7. One click rebound shell; 8. Download files; 9. Scan ports; 10. Bypass deep-seated disable_functions
Operation effect diagram：
Effect drawing of initial operation：
Connection success effect：
bypass some disable_functions:（Full automatic bypass）
Connect to the mysql:
reshell:
Contributors:
s1mple from SU;
remarks：
Tools are always tools, which will have some limitations; If you want to better learn security knowledge, you need to understand the vulnerability principle and trigger mechanism; Tools are only used by the supplier; Should not rely on;
importance：
Note that this script is not for the services enabled by phpstudy, because the local php environment is required to get the version at the beginning, otherwise an error will be reported; The phpstudy cannot use the local terminal to execute php -v；Fortunately, almost no problem or actual environment runs on phpstudy；In addition, this script is somewhat limited in its function under windows
177 Dec 22, 2022
12 Jan 07, 2023
3 Dec 13, 2021
3 Jun 07, 2022
15 Dec 18, 2021
9 Nov 26, 2022
81 Dec 20, 2022
820 Dec 18, 2022
22 Jul 22, 2022
2 Jun 01, 2022
10 Oct 06, 2022
7 Sep 19, 2022
3 Feb 07, 2022
5 Nov 23, 2021
44 Nov 18, 2022
32 Dec 25, 2022
365 Nov 30, 2022
5 Nov 17, 2022
13 Jul 04, 2021