Sunday, January 10, 2016
DAws - Advanced Web Shell
About
There's multiple things that makes DAws better than every Web Shell out there:
º Bypasses Security Systems using various methods.
º Drops CGI Shells and communicate with them to bypass Security Systems.
º Uses the SSH Authorized Keys method to bypass Security Systems.
º Uses Shellshock to bypass Security Systems.
º Is completely Post Based and uses a XOR Encryption based on a random key that gets generated with every new session + private base64 functions to bypass Security Systems.
º Supports Windows and Linux.
º Find a writeable and readable directory and moves there if it's a web directory.
º Drops a php.ini and a .htaccess file that clears all disablers incase "suphp" was installed.
º Has an advanced File Manager
º Mostly everything is done automatically (when it comes to command or script execution)
Credits:
º dotcppfile
º Aces who helped me code the old version of DAws
º Vedu for checking and reporting bugs.
Continue exploring /
Cloud SecurityHackers ToolsPentest ToolsSecurity ToolsWeb SecurityMore from the research archive.
Browse all articles →Search
Blog Archive
Top 75 Hacker Blogs
Popular Posts
-
pbtk is a GUI-driven toolkit that extracts Protobuf structures from Java, C++, and web targets back into readable .proto files, then lets...
-
rea wires AI agents and a CLI into local reverse-engineering workflows, decompiling native binaries and mapping JavaScript applications fo...
-
NTDLL-reconstruction is a small C library demonstrating a userland EDR evasion technique that lets an operator flip between hooked and un...
-
CyberStrike is an open-source AI agent harness that turns an existing LLM subscription into a methodology-driven penetration testing assis...
-
AiSOC is an open-source, self-hostable AI Security Operations Center that ingests telemetry, correlates alerts, and lets auditable AI agen...
-
linWinPwn is a bash orchestrator that wraps dozens of Active Directory toolsets — from netexec to Certipy — into a streamlined workflow ...
Build your lab
Categories
#SnowdenActive Directory AttacksAI SecurityAnalysisAndroidAndroid HackAndroid PentestAnonimatoAnonymityAnti-ForensicAnti-Forensic ToolsAnti-GovernmentAnti-SystemApacheAPI HackingAPKARMAssemblyAttack MapAuditing ToolAutomation ToolsAvKillAWS PentestBackdoorBindBlue TeamBlueTeamBluetoothBotbotnet/DDoSBountyBrute ForceBug BountyBypassCertificateCheat SheetCloud ForensicsCloud PentestCloud SecurityCoursesCryptographyCTF & CrackmesCTF EngineCVEsCyber ForensicsCyber WarData BaseDeepWebDevSecOpsDFIR & ForensicsDisassemblerDLL HijackingDns EnumerationDns ReconDns SpoofDocumentaryDoSDownloadsDUMPEmail HackingEncrypted DNSEngenharia ReversaEnumerationEvasionEXIFExploitExploitationExploitation ToolsExposed LeakedFakeFilmes e DocumentáriosFingerprintFirewallFootprintFrameworksFuck The SystemFuzzerGeoIPGoogle HackingHacker Operating SystemsHackersHackers NewsHackers ToolsHackingHacking Ebook'sHacking VídeosHacktivismHardeningHardwareHardware & WirelessHardware HackHiddenHIDSHoneypotsHow to exit the MatrixIDSIDS/IPSIncident ResponseInformation GatheringiOSIoTJAVAKaliKali LinuxKeyloggerLabsLeakedLeaksLearning ResourcesLeave The MatrixLinuxLinux SystemMacMalwareMalware AnalysisMetaSploitMind MapMIPSMITMMobile SecurityMonitoringMoviesNetworkNetworkingNew World OrderNmapOffensive PoliticsOffensive SecOffSecOffSec Exclusive ToolsOpen Your MindOpenSSLOs SecOSINT ToolsOWASP ZAP ScannerPassword CapturePassword CrackingPasswordsPayloadPCCPDFPentestPentest ToolsPhishing AttacksPhonesPHPPort ScanPost-ExploitationPost-Exploitation ToolPowerShellPr1v8PrivacidadePrivacyPrivacy & AnonymityPrivilege EscalationProjectsProxyPythonRansomwareRATRecon & OSINTRecover File and Disk AnalyzerRed TeamRedesRemoteReverseReverse EngineeringReverse ShellRFIDRootkitScan ToolsSecuritySecurity Ebook'sSecurity ToolsSeriadosSeriesShellShell PHPShellcodeShodanSnifferSocial EngineeringSource CodeSpoofingSQLinjectionSSLStealerSteganographyStress TestingStudySubdomain DiscoverySysInternalsTelnetThe Theory of ConspiracyThreat IntelligenceToolsTorTrojanTutorialsUnix SystemURL InspectorUsb BootVirtual MachineVirusVoIPVPNVulnerabilitiesVulnerability AnalysisWAFWeb ApplicationsWeb PentestingWeb SecurityWhoisWifi-HacksWindowsWireless HackingWord ListWordPressX86XSS

0 comentários:
Post a Comment
Note: Only a member of this blog may post a comment.