Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[PHP] Private Shell [IN PROGRESS]

Hey guys,
I've decided to start building my own shell because of the amount of backdoored C99's and how easily they get stolen.
I'm going to go at this shell creation from a different angle, there are going to be some good features added!

I'll keep updating this thread with progress reports and such, but heres just a screenshot of what the shell looks like ;)

SCREENSHOTS
UPDATED Main Server Information (04-Feb-2012)
Spoiler (Click to View)
UPDATED Directory Listing (02-Feb-2012)
Spoiler (Click to View)
View Source of Files
Spoiler (Click to View)
Edit Source of Files
Spoiler (Click to View)
Email Bomber
Spoiler (Click to View)
File Uploader
Spoiler (Click to View)
Back Connect [Shell Spawner] UPDATED: (04-Feb-2012)
Spoiler (Click to View)
Log Cleaner [ 08-Feb-2012 ]
Spoiler (Click to View)
Tools Section - (UDP FLOODER SPAWNER)
Spoiler (Click to View)
Reverse IP Lookup
Spoiler (Click to View)

Current Features
  • Hostname

  • Host IP

  • Server Software (uname -a)

  • Current Directory + Base Directory

  • PHP Version

  • SQL Version

  • User ID (userID,groupID,processID,name)

  • Safemode Check

  • Magic Quotes Check

  • Open Base Directory Check

  • Read 'etc/passwd' File Check

  • Mass Mailer (Email Bomber)

  • File Uploader

  • Directory Browser [PROGRESS : 90% -->View Current Directory|Download Files|View Source of Files --> Working On: symlink+different directory viewing]

  • Backconnect (c, perl) [PROGRESS: 98% --> Laid down the base code for the back connect to open up a user-specified TCP Port]

  • Log Cleaner[b/] [PROGRESS: 99% --> Just working out a few bugs and need to compile a bigger list of log files, please submit paths to me! ;D)

  • Reverse IP Lookup (Also checks if site is online)

  • UDP FLOODER Creator (No need to have to upload it, just create one ;)!)




[b]Soon To Be Added

  • Auto Backdoor

  • Password Protection (Possible?)

  • Safemode Bypass

  • Magic Quotes Bypass

  • Auto-Symlink (Possible?)

  • PHPProxy

  • Local Root Exploit Search

  • (More As I Progress😉)




SHELL REVIEW AS OF 04-Feb-2012: https://hackforums.net/showthread.php?ti...id19658378



as always....
i will describe ur stuff in single word
Spoiler (Click to View)
keep it up man..
Why would you want to create such a massive shell for private use ? When any command can be done with a small uploaded php shell of 6 lines of code in order to establish a connect back shell ?
(Feb 1, 2012 03:52 AM)thethatguy Wrote:  Why would you want to create such a massive shell for private use ? When any command can be done with a small uploaded php shell of 6 lines of code in order to establish a connect back shell ?

Thats a good question mate.

One of the reasons i want to try and make this shell is see where I sit with PHP, I'm interested in how shells work and how I would go about coding one :)
Which so far is going rather well.

I understand where you are coming from, just tired of the usual C99/WSO/GNY/etc stuff.

I'll release it when its done :P
I like the look of it. Clean.

I'm curious on how to finished project will turn out.
(Feb 1, 2012 03:58 AM)kobez Wrote:  Thats a good question mate.

One of the reasons i want to try and make this shell is see where I sit with PHP, I'm interested in how shells work and how I would go about coding one :)
Which so far is going rather well.

I understand where you are coming from, just tired of the usual C99/WSO/GNY/etc stuff.

I'll release it when its done :P

Well if you are gaining coding skills good for you. Get your linux commands in a row and soon you will see how simple it actually is.
(Feb 1, 2012 04:03 AM)Bacardi Wrote:  I like the look of it. Clean.

I'm curious on how to finished project will turn out.

Thanks 🤝
Going for a sleek GUI, compared to this other stuff floating around.

(Feb 1, 2012 04:05 AM)thethatguy Wrote:  Well if you are gaining coding skills good for you. Get your linux commands in a row and soon you will see how simple it actually is.

Thanks 🤝
I'll be looking into those commands soon enough, just pondering around with my PHP scripts 🤮
Damn GUI is already looking sexy as fuck
[Image: s2LT8w1.png]
UPDATE: Directory Listing is now complete, and It also allows you to download the files 😈
(Still have to work on the functions to allow you to go up directories and in other directories to view their files ;) )

Screenshot
Spoiler (Click to View)
Well look @ ani, add password not that hard just saying.
And you should add a basic nofollow to the search engine to "hide" it.

And please don't make it black & green, look @ Zeus C&C white and blue that's sexy :)
i wish you GL :D
(Feb 1, 2012 05:24 AM)betona Wrote:  Well look @ ani, add password not that hard just saying.
And you should add a basic nofollow to the search engine to "hide" it.

And please don't make it black & green, look @ Zeus C&C white and blue that's sexy :)
i wish you GL :D

Was thinking about adding some code to stop google from crawling it, and also preventing dorks being formed.

It will have some blue in it 😈 the IP atm is just green to remind me its there.
Make it hidden like 404 but a bit more disguised. Maybe only show the page if they have a certain useragent like SeaMonkey or a MD5 hash that you set inside the script.

For funzies you should add a DOS function, Mailbomb, smsbomb(if you can) and a web proxy :D
UPDATED THE DIRECTORY LISTING ;)
---> You can now download+view the source of files in the current directory!!
-->Working On: Being able to view other files in different directories ;)
[img]http://img220.imageshack.us/img220/9439/shellz.png[/img]
Looking good. Cant wait to use it! :D
Nice job kobez, it looks really clean and organized unlike alot of the shells people use nowadays. I'll definitely be keeping my eye on this, and using it when you're done.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by NetworkTrojanFeb 29, 2024 05:13 PM 11 764 Feb 29, 2024 05:13 PM
Last Post: Komodo
by poision-v1p3RApr 18, 2017 12:35 AM 37 2,390 Apr 18, 2017 12:35 AM
Last Post: Malicious Intent
by Chill DillDec 1, 2016 09:49 PM 12 1,576 Dec 1, 2016 09:49 PM
Last Post: m115