weevely3

Provide a stealthy PHP webshell with post-exploitation modules for file operations and network scanning.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill weevely3
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: weevely3
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/shells/weevely3
Command: npx skills add https://github.com/AeonDave/malskill --skill weevely3

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a stealthy PHP webshell with advanced post-exploitation capabilities, allowing for comprehensive system interaction and control after initial compromise.

Core Features & Use Cases

  • Interactive Shell: Gain an interactive PHP shell on the target system.
  • Post-Exploitation Modules: Utilize over 30 modules for file operations, network scanning, pivoting, and persistence.
  • Use Case: After uploading a webshell via a vulnerability, use this Skill to explore the file system, scan the internal network, and establish a SOCKS5 proxy for further lateral movement.

Quick Start

Connect to the uploaded webshell at http://target.com/uploads/shell.php using the password 'MyPassword'.

Frequently Asked Questions about weevely3

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I maintain access to a compromised web server using a PHP webshell?

A PHP webshell provides a stealthy interactive shell on a compromised web server, allowing you to maintain access, execute OS commands, and manage files for post-exploitation persistence.

How can I pivot into an internal network after uploading a webshell?

After deploying a webshell, you can pivot into an internal network by utilizing built-in post-exploitation modules for network scanning and establishing a SOCKS5 proxy for lateral movement.

What can I do with a PHP webshell during post-exploitation?

During post-exploitation, a PHP webshell enables OS command execution, interactive shell access, file operations, network scanning, proxying, and auditing of PHP configurations on the target.

Are there webshells with built-in modules for file operations and network scanning?

Yes, this stealth PHP webshell includes over 30 post-exploitation modules specifically designed for file operations, network scanning, pivoting, and persistence on a compromised server.

How do I connect to an uploaded webshell to run OS commands?

To connect to an uploaded webshell and execute OS commands, target the specific URL path of the uploaded PHP file and authenticate using the designated webshell password.