shell-hack
Tribute to Chinese ant sword；
A Powerful terminal based webshell controller；
Usage :
Usage :
python3 shell-hack.py --url [URL] --way [METHOD] --pwd[AUTH]
python3 shell-hack.py --shell create --pwd [AUTH]
(Generate kill free webshell)
Example :
python3 shell-hack.py --url http://challenge-d1e1be944a48fd8c.sandbox.ctfhub.com:10800/backdoor/ --way post --pwd ant
Author :
s1mple-SUer QQ:3513582223 Wei:w_s1mple
If you have connected to webshell：
===>get info(get the information from server)
===>bypass(see the bypass ways)
===>readfile(read the file from server)
===>downfile(download file from server)
===>reshell(Have a rebound shell)
===>portscan(scan the port from server)
===>mysql(connect to the mysql and Execute SQL code)
Installation:
git clone https://github.com/s1mple-top/shell-hack
cd shell-hack
python3 shell-hack.py
Compatibility :
Enviroment :
Attacker :
Linux;macos;windows;Unix-like
python3(My Python version 3.8.2)
Attacked server：The best state is linux or unix-like; there will be some restrictions under windows
Realize function
1. Generate a kill free shell; (it is not ruled out that some cannot be exceeded. 2. Automatically bypass the restrictions according to the system restrictions to read files; 3. Obtain probe execution commands; 4. Automatically spy and automatically select available functions for execution; 5. Database connection operation; 6. Obtain sensitive information on the server; 7. One click rebound shell; 8. Download files; 9. Scan ports; 10. Bypass deep-seated disable_functions
Operation effect diagram：
Effect drawing of initial operation：
Connection success effect：
bypass some disable_functions:（Full automatic bypass）
Connect to the mysql:
reshell:
Contributors:
s1mple from SU;
remarks：
Tools are always tools, which will have some limitations; If you want to better learn security knowledge, you need to understand the vulnerability principle and trigger mechanism; Tools are only used by the supplier; Should not rely on;
importance：
Note that this script is not for the services enabled by phpstudy, because the local php environment is required to get the version at the beginning, otherwise an error will be reported; The phpstudy cannot use the local terminal to execute php -v；Fortunately, almost no problem or actual environment runs on phpstudy；In addition, this script is somewhat limited in its function under windows
4 Jan 17, 2022
33 Jan 04, 2023
9 Sep 21, 2022
896 Dec 19, 2022
3 Jan 08, 2022
4 Jan 27, 2022
8 Jan 03, 2023
6 Jul 24, 2022
13 Nov 09, 2022
53 Nov 01, 2022
31 Nov 22, 2022
263 Jan 01, 2023
80 Dec 30, 2021
12 Nov 09, 2022
1 Jun 30, 2022
2 Dec 16, 2021
2 Jan 25, 2022
3 Jan 28, 2022
43 Nov 09, 2022
1 Nov 15, 2021