phpsploit

Execute commands and manage files through PHP webshells over HTTP.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill phpsploit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: phpsploit
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/c2/phpsploit
Command: npx skills add https://github.com/AeonDave/malskill --skill phpsploit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires phpsploit, and includes references (resource) components.

What problem does it solve?

This Skill provides a stealthy, interactive post-exploitation framework for PHP webshells, allowing for command execution, file operations, and plugin-based enhancements over HTTP.

Core Features & Use Cases

  • Interactive Shell: Gain a full interactive session through a PHP webshell.
  • File Operations: Upload, download, list, and navigate the target's file system.
  • Command Execution: Run arbitrary OS commands on the target.
  • Plugin System: Extend functionality with post-exploitation modules.
  • Use Case: After gaining initial access via a PHP webshell, use this Skill to explore the file system, escalate privileges, or exfiltrate data.

Quick Start

Use the phpsploit skill to connect to the webshell at http://target.com/shell.php with the passkey MySecret.

Frequently Asked Questions about phpsploit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get an interactive shell from a PHP webshell?

To get an interactive shell from a PHP webshell, use a post-exploitation framework to establish a full interactive session that enables file operations and command execution over HTTP headers.

How does command execution over HTTP headers work for PHP post-exploitation?

Command execution over HTTP headers works by routing OS commands and session data through HTTP headers, allowing a stealthy interactive post-exploitation session with an established PHP webshell.

Can I upload and download files through a PHP webshell?

Yes, you can upload and download files through a PHP webshell by utilizing an interactive post-exploitation framework that supports file operations on the target's file system.

Do I need Python 3 to use an interactive PHP webshell framework?

Yes, you need Python 3 and the phpsploit library installed to operate this interactive PHP webshell post-exploitation framework and execute its command modules.

What is the best way to maintain stealth during PHP post-exploitation?

The best way to maintain stealth during PHP post-exploitation is to use a framework that routes traffic over HTTP headers, minimizing network visibility while enabling interactive sessions.

How do I connect to a PHP webshell using a passkey?

To connect to a PHP webshell using a passkey, provide the target URL and the designated passkey to the post-exploitation framework to initiate the interactive session.