webshell

Documentation

Overview

Webshell payloads

The webshell package contains webshell payloads that can be dropped onto remote targets

Index

• Variables
• type Dropper
• type JSPWebshell
  • func (jsp *JSPWebshell) GetKeyed(key string) string
  • func (jsp *JSPWebshell) GetKeyedMinimal(key string) string
• type PHPWebshell
  • func (php *PHPWebshell) MinimalGet() (string, string)

Variables

var (
	//go:embed jsp/webshell.jsp
	GetKeyed string
	//go:embed jsp/webshell_min.jsp
	GetKeyedMinimal string
)

var (
	PHP = &PHPWebshell{}
	JSP = &JSPWebshell{}
)

Types

type Dropper

type Dropper interface{}

type JSPWebshell

type JSPWebshell struct{}

func (*JSPWebshell) GetKeyed

func (jsp *JSPWebshell) GetKeyed(key string) string

GetKeyed generates a JSP webshell that uses key as the basic authorization for a webshell. This webshell will return all output information.

func (*JSPWebshell) GetKeyedMinimal

func (jsp *JSPWebshell) GetKeyedMinimal(key string) string

GetKeyedMinimal generates a JSP webshell that uses key for basic GET authentication. Unlike GetKeyed, this payload does not return any information directly and is more useful for staging other implants or reverse shell payloads.

type PHPWebshell

type PHPWebshell struct{}

func (*PHPWebshell) MinimalGet

func (php *PHPWebshell) MinimalGet() (string, string)

A very basic PHP webshell using short tags and no error checking. The webshell will generate a random variable to fetch the command from. Usage example:

shell, param := webshell.PHP.MinimalGet()