DeadCoder1722
New member
Bypass Shell Tool
The tool also supports automatic retries, file upload validation, and vulnerability scanning for common web vulnerabilities such as File Upload issues, LFI/RFI, XSS, and SQL Injection.
Overview
ShellKill is a Python tool designed to upload a web shell to a target server and trigger it using various evasion techniques to bypass file upload restrictions. A web shell is a script that provides remote access and control over a web server. By uploading a web shell, an attacker can execute commands on the target server, manipulate files, and potentially escalate privileges.The tool also supports automatic retries, file upload validation, and vulnerability scanning for common web vulnerabilities such as File Upload issues, LFI/RFI, XSS, and SQL Injection.
Command-Line Arguments
- target_url: Target URL of the server you want to test. (e.g., http://example.com)
- shell_file_path: Path to the web shell you want to upload.
- upload_url: The upload endpoint where the file should be uploaded.
- --proxies: Optional argument to specify proxies. (e.g., --proxies http://127.0.0.1:8080)
- --max_retries: Set the maximum number of retries for the upload (default: 5).
- --evasion_techniques: Enable or disable evasion techniques. Default is True.
- --timeout: Set the timeout for requests in seconds (default: 10).
(Download)