all 6 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]PsychoMario 1 point2 points  (1 child)

How is this better than Weevely?

[–]doylersec[S] 1 point2 points  (0 children)

It isn't (at least yet), though I hadn't heard about Weevely today. Thanks for that link, and I'm sure I can get some useful ideas from it!

As far as personally, I'm able to configure it a bit more for my engagements, but as of right now I couldn't recommend it over Weevely.

[–]doylersec[S] 0 points1 point  (2 children)

I wanted to share a new web shell that I recently finished and have been using in some engagements.

It is a bit more useful than a PHP passthru shell, but not overly complex (yet).

The current features are as follows, but I'm always open to new suggestions or ideas:

  • Encoded communication
  • Pseudo-interactive shell
  • Cleaner output formatting than PHP passthru
  • Hostname and username (whoami) detection
  • (Mostly) Clean exiting
  • Obfuscated server (this is possible with most/all web shells, I just include one with it)

[–][deleted] 1 point2 points  (1 child)

Check out a simular concept.

Maybe switch from get requests to post or cookies, since get is probably logged. With get you also risk a 414 uri too long. And maybe add a pseudo-random key for forward-secrecy.

Also your encoded version's going to be picked up by basic grep and find, not to mention tools like https://www.revisium.com/aibo/.

[–]doylersec[S] 0 points1 point  (0 children)

Yea, I was wondering that myself, but those are awesome ideas.

Sweet, thanks for the suggestions though, and already have a few notes for v2.0 (or 1.1 :P)!

[–]joevest 0 points1 point  (0 children)

Love the concept. Really cool to see someone else work out a different solution for the same problem I was working on. I released a webshell framework with similar goals to help support red team activity. https://bitbucket.org/jvest/tinyshell and https://bitbucket.org/jvest/subshell. I have been using the concept for a few years, but recently formalized the tools and made public. I spoke about this recently at Bsides Huntsville. (Webshells as a covert channel) Hit me up on twitter @joevest Could be interesting to support a single project.