PHP Shells PentesterLab & DVWA

WE RECALL THAT ALL THE TECHNIQUES SHOWN HEREBY ARE WELL DESCRIBED ON THE NET, YET WE PERFORMED BY OURSELVES STEP BY STEP ALL THE LABS DEMONSTRATED IN THIS BLOG, MTIBAA Riadh

PHP Web Shells in Forensic Analysis

• Backdoor scripts,
• Uploaded on web servers,
• Illegitimate access (read/write/edit/delete).

1. Simple Backdoor Shell

• John Troon,

• Remote code execution.

2. qsd-php Backdoor Shell

• Daniel Berliner,

• Platform to execute system command.

3. PHP-reverse shell

• Pentestmonkey,

• Outbounds TCP connection from server to host,

• Attaches shell to TCP connection,

• Runs interactive programs (telnet/ssh).

4. MSFvenom based PHP Backdoor Shell 

5. Weevely Shell

Simulates Telnet.

6. PHPbash shell

• Internet shell,

• Arrexel.