Skip to content

Entry

PhpSploit

Appears in 4 awesome lists

Full-featured C2 framework which silently persists on webserver via evil PHP oneliner. Built for stealth persistence, with many privilege-escalation & post-exploitation features.

Open github.comnil0x42/phpsploit

Found in these lists

Awesome Hacking -An Amazing Project

Section: Tools · Full-featured C2 framework which silently persists on webserver via evil PHP oneliner

StaleScore 59

Awesome Penetration Testing

Section: Web shells and C2 frameworks · Full-featured C2 framework which silently persists on webserver via evil PHP oneliner.

ActiveScore 83

Awesome Security

Section: Scanning / Pentesting · Full-featured C2 framework which silently persists on webserver via evil PHP oneliner. Built for stealth persistence, with many privilege-escalation & post-exploitation features.

SlowScore 70

Awesome Web Security

Section: Webshell · Full-featured C2 framework which silently persists on webserver via evil PHP oneliner by @nil0x42.

FreshScore 87

Shodan

Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.

In 12 listsDetails

sqlmap

Tamper scripts in SQLMap obfuscate payloads which might evade some WAFs.

In 10 listsDetails

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes..

In 7 listsDetails

Recon-ng

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Recon-ng has a look and feel similar to the Metasploit Framework.

In 6 listsDetails

Spyse

Spyse is an OSINT search engine that provides fresh data about the entire web. All the data is stored in its own DB for instant access and interconnected with each other for flexible search. Provided data: IPv4 hosts, sub/domains/whois, ports/banners/protocols, technologies, OS, AS, wide SSL/TLS…

In 5 listsDetails

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

In 4 listsDetails

Decompiler.com

C#, Python, Android and Java online decompiler.

In 4 listsDetails

beef

Command and control server for delivering exploits to commandeered Web browsers.

In 4 listsDetails