🔓 Ultimate Webshell - Penetration Testing Tool

📖 File Reader

<html>
<head>
    <title>PHP Execution Method Checker</title>
    <style>
        body { font-family: monospace; background-color: #1e1e1e; color: #d4d4d4; padding: 20px; }
        .working { color: #4CAF50; font-weight: bold; }
        .disabled { color: #F44336; }
        .info { color: #569CD6; }
    </style>
</head>
<body>
    <h2>PHP Command Execution Method Checker</h2>
    <hr>

<?php
// List of common PHP functions used for command execution
$methods = array(
    'system',
    'exec',
    'shell_exec',
    'passthru',
    'popen',
    'proc_open'
);

$working = array();
$disabled = array();

// Fetch the disabled functions from the PHP configuration
$disable_functions_string = ini_get('disable_functions');
$disabled_funcs = explode(',', $disable_functions_string);
$disabled_funcs = array_map('trim', $disabled_funcs); // Remove extra whitespace

// Test each method
foreach ($methods as $method) {
    // Check if it's in the disabled list OR if the function doesn't exist at all
    if (in_array($method, $disabled_funcs) || !is_callable($method)) {
        $disabled[] = $method;
    } else {
        $working[] = $method;
    }
}

// --- Output the Results ---

echo "<h3>Working / Enabled Methods:</h3>";
echo "<ul>";
if (empty($working)) {
    echo "<li class='disabled'>None of the standard methods are enabled. RCE is heavily restricted.</li>";
} else {
    foreach ($working as $w) {
        echo "<li class='working'>$w()</li>";
    }
}
echo "</ul>";

echo "<h3>Disabled Methods:</h3>";
echo "<ul>";
if (empty($disabled)) {
    echo "<li class='working'>None. All standard methods are available.</li>";
} else {
    foreach ($disabled as $d) {
        echo "<li class='disabled'>$d()</li>";
    }
}
echo "</ul>";

echo "<hr>";
echo "<h3>Raw disable_functions directive:</h3>";
if (empty($disable_functions_string)) {
    echo "<p class='info'><em>(The disable_functions directive is empty or not set)</em></p>";
} else {
    echo "<p class='info'>" . htmlspecialchars($disable_functions_string) . "</p>";
}
?>

</body>
</html>