Weevely
A weaponized PHP web shell for post-exploitation with over 30 modules for remote administration, auditing, and network pivoting.
What is Weevely?
Weevely is a weaponized web shell used in penetration testing to maintain access and perform post-exploitation activities on compromised web servers. It provides a remote command-line interface and a modular framework with over 30 modules for tasks like file management, security auditing, network pivoting, and privilege escalation. The tool is designed to be stealthy, using an obfuscated PHP agent that evades detection while communicating over HTTP.
Security professionals, penetration testers, and red teamers who need to simulate advanced persistent threats and conduct post-exploitation activities during authorized security assessments.
Developers choose Weevely for its extensive modular framework, stealthy communication protocol, and ability to pivot through networks, making it a comprehensive tool for post-exploitation scenarios beyond basic shell access.
Overview
Weaponized web shell
Use Cases
Best For
- Maintaining persistent access to compromised web servers during penetration tests
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
