Spug is a lightweight agent-free automatic operation and maintenance platform designed for small and medium-sized enterprises. It integrates host management, host batch execution, host online terminal, file management, application release and deployment, pipelines, online task planning, configuration center, monitoring, alarm and so on.

jenkins devops task alert monitor ops ci deploy operations cmdb cicd webshell webconsole webssh ops-tools ops-admin opsadmin django-ops spug

• Updated Nov 7, 2026
• JavaScript

This is a webshell open source project

python php jsp jspx asp webshell aspx pl webshell-sniper

• Updated Dec 24, 2024
• PHP

Quick deployment, distributed, multi-user, modern management panel for Minecraft and Steam game servers / 快速安装，分布式架构，多用户，现代化的 Minecraft 和 Steam 游戏服务器管理面板

nodejs docker minecraft webshell minecraft-server-software mcsmanager steam-game-server-manager server-web-panel

• Updated Nov 12, 2026
• TypeScript

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

drupal exploit nexus tomcat poc vulnerability webshell exp weblogic getshell cve-2020-1938 cve-2020-2551 cve-2020-2555 cve-2020-10199 cve-2020-10204 cve-2020-2883 cve-2020-11444 cve-2020-5902 cve-2020-14882

• Updated Apr 4, 2021
• Python

🐛 Access your device from anywhere via the web.

remote-control proxy websocket nat http-proxy tty remote-shell webshell webssh remote-debug remote-console

• Updated Nov 7, 2026
• C

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

backdoor persistence hacking blackhat post-exploitation stealth privilege-escalation webshell php-backdoor web-hacking c2 hacktool command-and-control hacking-framework redteam php-webshell php-webshell-backdoor advanced-persistent-threat

• Updated May 6, 2024
• Python

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。

go shell golang remote-control spark dashboard rat server-monitoring webshell remote-admin-tool remote-access-tool remote-administration-tool

• Updated Mar 16, 2026
• Go

A collection of PHP backdoors. For educational or testing purposes only.

php webshell php-backdoor

• Updated Mar 9, 2024
• PHP

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

java payload real-world webshell memshell

• Updated Aug 21, 2025
• Java

Webshell && Backdoor Collection

shell backdoor rootkit webshell

• Updated Apr 6, 2020
• PHP

从零学习Webshell免杀手册

php anti-virus bypass bypass-av webshell bypass-antivirus php-webshell

• Updated May 24, 2025

绕过专业工具检测的Webshell研究文章和免杀的Webshell

backdoor webshell bypass-antivirus php-webshells jsp-webshell asp-webshell php-webshell hidden-shells detection-bypass

• Updated Nov 15, 2020
• Classic ASP

一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率

asm bytebuddy javassist payload javaweb webshell javaagent javasecurity memshell

• Updated Nov 12, 2026
• Java

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

proxy websocket webshell memshell

• Updated Apr 10, 2023
• Java

Detect potentially malicious PHP files

php malware antivirus yara webshell

• Updated Oct 20, 2023
• PHP

Bypass firewall for traffic forwarding using webshell

webshell cobalt-strike regeorg

• Updated Sep 29, 2021
• Python

一款高颜值、现代化的自动化运维及轻量堡垒机，提供全面的服务器智能运维解决方案。支持资产管理分组、多协议访问(SSH、SFTP、RDP、VNC)、实时系统监控与智能告警、文件上传下载、在线编辑、命令批量执行、多主机文件分发和计划任务配置(通过 cron 表达式)等功能，确保高效安全的运维体验。适用于 Linux 和 Windows 系统的运维管理。

java linux shell docker tunnel ssh ansible devops terminal ops vue sftp tty xterm rdp vnc jsch webshell

• Updated Feb 7, 2026
• Java

这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.

security osint cybersecurity pentest decryption webshell red-team network-security information-gathering security-tools threat-intelligence av-evasion vulnerability-scanner blue-team memshell webshell-decryption

• Updated Oct 10, 2026
• Java

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

obfuscation encryption csharp aspnet webshell

• Updated Nov 26, 2023
• Python

Self contained htaccess shells and attacks

security exploit apache penetration-testing polyglot htaccess webshell

• Updated Feb 17, 2022
• Shell