CompareComparing...

Stealthy PHP Web Shell Backdoor: Weevely


Stealthy PHP Web Shell Backdoor

Weevely is a command line web shell dinamically extended over the network at runtime used for administration and pen testing of remote web accesses. It provides a weaponized telnet-like console through a PHP script running on the target, even in restricted environments.

The low footprint agent and over 30 modules shape an extensible framework to administrate, conduct a pen-test, post-exploit, and audit remote web accesses in order to escalate privileges and pivot deeper in the internal networks.

The modular framework

Weevely modules extend the terminal providing a layer to interact to the remote target.

The modules feature:

  • Shell/PHP telnet-like network terminal
  • Common server misconfigurations auditing
  • SQL console pivoting on target
  • HTTP traffic proxying through target
  • Mount target file system to local mount point
  • Run scans pivoting on target
  • File upload and download
  • Spawn reverse and direct TCP shells
  • Zip, gz, bz2 and tar handling

 

Stealthy PHP Web Shell Backdoor: Weevely wiki

The backdoor agent

The remote agent is a very low footprint agent that receives the dynamically injected code from the client, extending the client functionalities over the network at run-time. The agent code is polymorphic and hardly detectable by AV and HIDS. The communication is covered and obfuscated within the HTTP protocol using steganographic techniques.

Modules development

Weevely also provides python API which can be used to develop your own module to implement internal audit, account enumerator, sensitive data scraper, network scanner, make the modules work as a HTTP or SQL client and do a whole lot of other cool stuff.

 

Source && Download

Stealthy PHP Web Shell Backdoor: Weevely download



Visitors Rating
Rate Here
Ease Of Use
50%
Features
52%
Value
50%
Overall Rating
50%
51%
Visitors Rating
3 ratings
You have rated this
What's your reaction?
OWND
0%
Cool
50%
Nice
50%
WHAT ?
0%
MEH
0%
zzzZZzz
0%
Rage
0%

You must log in to post a comment