pentestmonkey/php-reverse-shell
Php Reverse Shell
This project consists of PHP-based payloads and scripts designed to establish reverse network connections for remote shell access. It functions as a remote command execution tool used during security auditing to gain an interactive shell on a web server.
The scripts utilize PHP network sockets to redirect system shell input and output to a remote TCP connection. This allows for the establishment of a network connection from a target server back to a controlled machine to execute remote commands.
These capabilities support penetration testing workflows, PHP server auditing, and post-exploitation access to evaluate the security configuration of PHP environments.
Features
- Reverse Shells - Implements a reverse shell script that connects a target PHP server back to a remote listener for command execution.
- Shell Command Execution - Spawns a system shell process on the target machine to execute operating system commands.
- Remote Command Execution - Establishes a network connection from a target server back to a local machine for executing system commands.
- Input and Output Stream Control - Redirects the standard input and output streams of the system process directly into a network socket.
- Socket Networking - Establishes raw TCP socket connections to transmit data and receive commands from a remote controller.
- Payloads - Provides a minimal PHP payload that uses sockets to redirect shell I/O to a remote connection.
- Remote Command Execution Tools - Functions as a utility for delivering payloads and managing persistent remote command sessions.
- Penetration Testing - Provides tools for simulating exploits to gain interactive shell access during security assessments.
- PHP Environment Auditing - Facilitates evaluating PHP security configurations by attempting to execute unauthorized system-level instructions.
- Post-Exploitation Toolkits - Provides capabilities for maintaining access and escalating control over a compromised web server.
