Skip to content

Commit 27c287b

Browse files
author
R00t-Shell
authored
Update README.md
1 parent 1df913c commit 27c287b

File tree

1 file changed

+95
-2
lines changed

1 file changed

+95
-2
lines changed

README.md

Lines changed: 95 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,95 @@
1-
# wwwolf-php-webshell
2-
wwwolf's PHP Web Shell, sistem yöneticileri ve güvenlik uzmanları için geliştirilmiş hafif ve güvenilir bir PHP betiğidir. Kullanımı, kurulumu ve özellikleri hakkında detaylı kılavuz.
1+
# wwwolf's PHP Web Shell
2+
3+
**wwwolf's PHP web shell** is a lightweight and reliable PHP script designed to solve common issues encountered with various web shell tools. This tool is designed to provide initial access to the target system, offering a user-friendly and flexible interface.
4+
5+
## Features
6+
7+
- Password-protected access.
8+
- Compatible with UNIX and Windows systems without additional changes.
9+
- Clears the PHP output buffer for stable and clean execution.
10+
- Sends form data via POST requests, working without modifying the URL.
11+
- Uses the current working directory by default, allowing easy identification of the system type.
12+
- Offers additional features like file upload and remote file fetching.
13+
- Quickly clears the command input field without JavaScript.
14+
15+
## Installation and Usage
16+
17+
> ⚠️ **Warning:** This tool is intended for security research and evaluation only. Unauthorized use is strictly prohibited!
18+
19+
### Step 1: Download the Script
20+
21+
Download the script from the GitHub repository:
22+
23+
```
24+
https://github.com/WhiteWinterWolf/wwwolf-php-webshell/blob/master/wwwolf-php-webshell.php
25+
```
26+
27+
### Step 2: Upload to the Server
28+
29+
Upload the downloaded `wwwolf-php-webshell.php` file to the target server's web directory. For example:
30+
31+
```
32+
/var/www/html/wwwolf-php-webshell.php
33+
```
34+
35+
### Step 3: Access via Web Browser
36+
37+
Open your browser and access the script as follows:
38+
39+
```
40+
http://targetsite.com/wwwolf-php-wwwolf-php-webshell.php
41+
```
42+
43+
### Step 4: Password Protection (Optional)
44+
45+
When you open the script, if password protection is enabled, you will be prompted to enter a password. To change the default password, open the script file and find the following line:
46+
47+
```
48+
$password = 'default_password';
49+
```
50+
51+
Replace `default_password` with a strong password of your choice and save the file.
52+
53+
### Step 5: Execute Commands
54+
55+
After accessing the script, enter the command you want to execute in the input field and click the "Submit" button. For example:
56+
57+
```
58+
whoami
59+
```
60+
61+
This command will show the current username.
62+
63+
### Step 6: File Upload
64+
65+
Use the script's file upload feature to upload files to the target server:
66+
67+
- **Local File Upload:** Click the "Choose File" button to select a file from your computer and press "Upload."
68+
- **Remote File Fetch:** Enter the file's URL in the "Remote File URL" field and click "Fetch."
69+
70+
### Step 7: Change Working Directory
71+
72+
To change the current working directory, enter the new directory path in the "Change Working Directory" field and click "Change." For example:
73+
74+
```
75+
/var/www/html/new_directory
76+
```
77+
78+
## Security and Legal Disclaimer
79+
80+
> ⚠️ **Important:** This script is developed solely for security research and evaluation purposes. Using it for unauthorized access to systems is illegal and may lead to severe legal consequences. Please use this tool only for permitted and ethical purposes.
81+
82+
## Resources
83+
84+
- [GitHub Project](https://github.com/RootShelll/wwwolf-php-webshell)
85+
- [Official PHP Documentation](https://www.php.net/)
86+
87+
## Conclusion
88+
89+
wwwolf’s PHP Web Shell is a powerful PHP script for system management and security assessments. However, avoid unethical or illegal usage.
90+
91+
> 💡 **Tip:** To make the script more secure, you can add IP restrictions, strengthen password protection, or restrict access using htaccess.
92+
93+
---
94+
95+
Happy and safe testing!

0 commit comments

Comments
 (0)