Now Reading
Weevely – Stealthy PHP Web Shell Backdoor
0
Review

Weevely – Stealthy PHP Web Shell Backdoor

Weevely

Weevely is a command line web shell dinamically extended over the network at runtime used for administration and pen testing of remote web accesses. It provides a weaponized telnet-like console through a PHP script running on the target, even in restricted environments.

The low footprint agent and over 30 modules shape an extensible framework to administrate, conduct a pen-test, post-exploit, and audit remote web accesses in order to escalate privileges and pivot deeper in the internal networks.

The modular framework

Weevely modules extend the terminal providing a layer to interact to the remote target.

The modules feature:

  • Shell/PHP telnet-like network terminal
  • Common server misconfigurations auditing
  • SQL console pivoting on target
  • HTTP traffic proxying through target
  • Mount target file system to local mount point
  • Run scans pivoting on target
  • File upload and download
  • Spawn reverse and direct TCP shells
  • Zip, gz, bz2 and tar handling

 

weevely wiki

The backdoor agent

The remote agent is a very low footprint agent that receives the dynamically injected code from the client, extending the client functionalities over the network at run-time. The agent code is polymorphic and hardly detectable by AV and HIDS. The communication is covered and obfuscated within the HTTP protocol using steganographic techniques.

Modules development

Weevely also provides python API which can be used to develop your own module to implement internal audit, account enumerator, sensitive data scraper, network scanner, make the modules work as a HTTP or SQL client and do a whole lot of other cool stuff.

 

Source && Download

wp-download


Rate IT !
Our Rating
Visitors Rating
Rate Here
Ease Of Use
50%
50%
Features
50%
50%
Value
50%
50%
Overall Rating
50%
50%
50%
Our Rating
Visitors Rating
1 rating
You have rated this
What's your reaction?
OWND
0%
Cool
0%
Nice
0%
WHAT ?
0%
MEH
0%
zzzZZzz
0%
Rage
0%
About The Author
Profile photo of CyberPunk
CyberPunk