[Backdoor] B374K - webshell PHP functions

23:58:00 Unknown 1 Comments

Assalamu'alaikum   Am LeeT_Defacer

this shell is like the other webshell line is pretty useful tool for admins to perform remote management without having touched or ssh cpanel ... All tasks are executed in the browser.
The difference is that this shell to accompany the author wrote a small packer to allow users to customize as you wish. And because it is open source so it can take control of the "extras" that the shell on the network or sending. 

Function :

  • File management (view, edit, delete, rename, upload, download, extract, etc)
  • Search for files, content files, folders ... (support regular expression regex)
  • Execute command Execute scripts (php, perl, python, ruby, java, Node.js, c)
  • Tạo bind/reverse shell,back connect..
  • Supports packet crafter (simulated packets, like scapy, ncat ..)
  • Interface connected DBMS (MySQL, MSSQL, Oracle, SQLite, PostgreSQL, and the DBMS using ODBC or PDO)
  • SQL Explorer Process list/Task manager
  • Send email with attachments (can attach files on the server)
  • Convert string
  • Just one file, up and running, without installation
  • Support PHP > 4.3.3 và PHP 5.

Request :

  • PHP version > 4.3.3 và PHP 5
  • Shell user interface zepto.js v1.1.2, so the best display on the new browsers. See a list of supported browsers zepto.js in http://zeptojs.com/
  • All responsibilities when using shell

Installation :

Access the link at the end to follow the project's Git authors. In projects of this git was used to generate the webshell packer.

Clone projects, then use the command line interface to conduct web generate shell
README
$ php -f index.php
b374k shell packer 0.4
options :
        -o filename                             save as filename
        -p password                             protect with password
        -t theme                                theme to use
        -m modules                              modules to pack separated by comma
        -s                                      strip comments and whitespaces
        -b                                      encode with base64
        -z [no|gzdeflate|gzencode|gzcompress]   compression (use only with -b)
        -c [0-9]                                level of compression
        -l                                      list available modules
        -k                                      list available themes
For example :
$ php -f index.php -- -o myShell.php -p myPassword -s -b -z gzcompress -c 9
Note: In Project git just shell packer, if using the browser to access the index.php file will become a shell without a password, be careful when using on the server.
Github: 
https://github.com/b374k/b374k
BY Team Leet Spiders

Unknown

1 comment:

Subscribe to: Post Comments (Atom)