PHP.md

📂 Simple-PHP-Web-Shell

https://github.com/artyuum/Simple-PHP-Web-Shell/blob/master/index.php

📂 PHP HTTP Server

php -S <host ip>:<port>

📂 phpinfo

disable_functions = disabled commands

system
exec
shell_exec
passthru
popen
proc_open
pcntl_exec

📂 upload-bypasses

https://github.com/six2dez/pentest-book/blob/master/enumeration/web/upload-bypasses.md

We can attempt to upload the .htaccess file to configure the server to execute our custom file extensions as PHP scripts.

# The uploaded file may not be visible in the upload directory.
echo "AddType application/x-httpd-php <custom file extension>" > .htaccess
# example
echo "AddType application/x-httpd-php .abc" > .htaccess

📂 Single-file PHP shell

Combine bypass, such as phar

https://github.com/flozz/p0wny-shell/tree/master

📂 Joomla webshell plugin for RCE

https://github.com/p0dalirius/Joomla-webshell-plugin