Software: Apache/2.4.68 (Debian). PHP/8.2.33 uname -a: Linux 9d2024043b5d 7.0.12+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 7.0.12-2kali1 uid=33(www-data) gid=33(www-data) groups=33(www-data) Safe-mode: OFF (not secure) /var/www/html/ drwxr-xr-x | |
c99shell.php webshell Main C99SHELL 2.0 operator console rome-shell.php webshell Rome WebShell – obfuscated variant shell.gif.php backdoor GIF-header php backdoor php-backdoor.php backdoor PHP backdoor handler simple-backdoor.php backdoor Minimal PHP backdoor qsd-php-backdoor.php backdoor QSD PHP backdoor fpm_rce.py exploit PHP-FPM RCE exploit script fortiweb_jitu.py exploit FortiWeb CVE-2025-25257 exploit fortiweb_max.py exploit FortiWeb max-damage exploit wp_brute.py brute WordPress login brute forcer wp_brute_fkip.py brute WordPress FKIP target brute forcer cdp_solve.py turnstile Cloudflare Turnstile solver via 2captcha CDP cdp_browser.py turnstile Browser automation base class cdp_probe.py turnstile Turnstile token/widget probe deploy_kepegawaian.py deploy Shell upload via form submission solve_turnstile.py turnstile Turnstile solver entrypoint fpm_rce payload PHP-FPM RCE payload wso-shell webshell WSO shell variant Back connection: Click "Connect" only after open port for it. You should use NetCat©, run "nc -l -n -v -p 31373 "! Datapipe: Note: sources will be downloaded from remote server. |