webshell

Spug is a lightweight agent-free automatic operation and maintenance platform designed for small and medium-sized enterprises. It integrates host management, host batch execution, host online terminal, file management, application release and deployment, pipelines, online task planning, configuration center, monitoring, alarm and so on.

This is a webshell open source project

Quick deployment, distributed, multi-user, modern management panel for Minecraft and Steam game servers / 快速安装，分布式架构，多用户，现代化的 Minecraft 和 Steam 游戏服务器管理面板

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

🐛 Access your device from anywhere via the web.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。

A collection of PHP backdoors. For educational or testing purposes only.

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

Webshell && Backdoor Collection

从零学习Webshell免杀手册

绕过专业工具检测的Webshell研究文章和免杀的Webshell

一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

Detect potentially malicious PHP files

Bypass firewall for traffic forwarding using webshell

一款高颜值、现代化的自动化运维及轻量堡垒机，提供全面的服务器智能运维解决方案。支持资产管理分组、多协议访问(SSH、SFTP、RDP、VNC)、实时系统监控与智能告警、文件上传下载、在线编辑、命令批量执行、多主机文件分发和计划任务配置(通过 cron 表达式)等功能，确保高效安全的运维体验。适用于 Linux 和 Windows 系统的运维管理。

Self contained htaccess shells and attacks

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Guidance for mitigation web shells. #nsacyber