Work in progress...

PHP shells that work on Linux OS, macOS, and Windows OS.

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

Vulnerable Banking Suite

PHP ransomware that encrypts your files, as well as file and directory names.

Learn how to set up a fake authentication web page on a fake WiFi network.

Secure website with a registration, sign in, session management, and CRUD controls.

This tool is intended to be used for on target enumeration to gather and exfiltrate information and then to upload tools such as netcat or msvenom payload for further access to the target.

simple code directory brute

O EhLab (Ethical Hacker Laboratory) é um laboratório de pentest grátis e de código aberto, altere e adquira conhecimento de forma livre com nosso lab

wwwolf's PHP Web Shell is a lightweight and reliable PHP script designed for system administrators and security professionals. Detailed guide on usage, installation, and features.

Learn about BypassServ Mini Shell, a sophisticated webshell tool designed for cybersecurity research and education. Discover its features, usage, and SEO tips for your WordPress site.

Web Shell Detector is a PHP script designed to identify PHP, CGI (Perl), ASP/ASPX shells. It uses a "web shells" signature database to detect shells with up to 99% accuracy. The tool features a lightweight and user-friendly interface built with modern JavaScript and CSS technologies.

**ShellTon** is a simple and secure web-based file manager built with PHP. It allows you to manage files and directories on your server through an intuitive web interface. With features such as file navigation, editing, renaming, deleting, creating, and downloading

Fake Instagram Login is a simple project to demonstrate a fake login page for educational purposes. It mimics Instagram's login interface to raise awareness about phishing attacks and online security. Use it for learning and ethical security testing only. Not for malicious activities.

IndoSec-sHell: A PHP security tool for ethical hackers to secure servers and websites with advanced security tests and features.

The Simple Web Shell is a lightweight and user-friendly web-based interface for controlling a website using a single PHP file.

Vulnérable PHP framework ready to be hacked!

This article analyzes the PHP RootKit Backdoor, explaining its features like password-protected access, command execution, file management, and PHP code execution. Learn about the security risks associated with such scripts and how ethical hackers and security researchers study them to enhance web security.