Volver al ranking

AabyssZG/WebShell-Bypass-Guide

blog.zgsec.cn/archives/197.html

从零学习Webshell免杀手册

bypassbypass-antiviruswebshellphpanti-virusbypass-avphp-webshell
Crecimiento de estrellas
Estrellas
1.8k
Forks
144
Crecimiento semanal
Issues
0
5001k1.5k
mar 2023abr 2024jun 2025jul 2026
README

从零学习WebShell免杀手册系列

临渊羡鱼,不如退而结网;扬汤止沸,不如去火抽薪。

WebShell-Bypass-Guide

1# 本手册系列目录

  • PHP从零学习到Webshell免杀手册【基本完成】
  • PHP-WebShell管理工具免杀手册【完善中】
  • JSP从零学习到Webshell免杀手册【完善中】
  • JSP-WebShell管理工具免杀手册【还没开始】
  • CSharp(ASP.Net)从零学习到Webshell免杀手册【规划中】

2# 阅读具体免杀手册内容

请点击想看的手册名字,下方会自动弹出相应内容:

2.1 PHP从零学习到Webshell免杀手册

本手册已经开源,开源地址:WebShell-Bypass-Guide/PHP-Webshell-ByPass-Guide.md

手册版本号:V1.4.9-2025/01/10

这是一本能让你从零开始学习PHP的WebShell免杀的手册,同时我会在内部群迭代更新

如何在线阅读?

2.2 PHP-WebShell管理工具免杀手册

手册版本号:V1.0.1

手册还在完善中,争取尽早开源

2.3 JSP从零学习到Webshell免杀手册

手册版本号:V1.0.1

手册还在完善中,争取尽早开源

2.4 JSP-WebShell管理工具免杀手册

由于平时比较繁忙,项目维护时间不是很多,还没写哈哈

2.5 CSharp(ASP.Net)从零学习到Webshell免杀手册

本项目由塔菲师傅主编维护,编写ing

如果师傅们觉得不错,欢迎给我点个Star哈哈~ 有什么新的WebShell免杀姿势、手法,欢迎与我们交流

也欢迎各位师傅关注我们团队公众号啦

微信公众号.png

3# 相关说明

本手册由渊龙Sec安全团队的 @AabyssZG@塔菲 师傅共同整理

  1. 本资料仅供学习参考,严禁使用者进行未授权渗透测试!
  2. 部分免杀思路来自互联网,欢迎各位师傅和我交流。
  3. 本文为内部参考资料,仅作学习交流,严禁任何形式的转载。
  4. 本文档内容为完整版,由渊龙Sec安全团队成员 AabyssZG塔菲 师傅共同编写。

关于学习交流以及问题的解决

微信群

如果微信群已满200人,请加微信号 chunshangchunshu_ 邀请入群即可

4# 感谢各位师傅

Stargazers

Stargazers repo roster for @AabyssZG/WebShell-Bypass-Guide

Forkers

Forkers repo roster for @AabyssZG/WebShell-Bypass-Guide

Star History

Star History Chart

Repositorios relacionados
swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PythonPyPIMIT Licensepentestpayload
swisskyrepo.github.io/PayloadsAllTheThings/
79.3k17.2k
Max-Eee/NeoPass

Your Essential Exam Companion for the Iamneo Portal & NPTEL Exams Disguised as NeoExamShield bypass

JavaScriptnpmaichrome-extension
neopass.tech
24.8k95
MatrixTM/MHDDoS

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

PythonPyPIMIT Licenseddosddos-attacks
16.4k3.6k
GTFOBins/GTFOBins.github.io

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

YAMLGNU General Public License v3.0post-exploitationlinux
gtfobins.org
13.5k1.6k
screetsec/TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

CGNU General Public License v3.0thefatratbypass
11.4k2.5k
everywall/ladder

Selfhosted alternative to 12ft.io. and 1ft.io. Proxy to remove CORS headers and modify HTML

GoGo ModulesGNU General Public License v3.0bypasspaywall
8.7k508
Mr-xn/Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

HTMLApache License 2.0penetration-testingpoc
mrxn.net
7.4k2k
daffainfo/AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

bugbountybugbountytips
6.8k1.3k
k8gege/K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

PowerShellMIT Licenseexploit0day
k8gege.org
6.2k2.1k
esrrhs/pingtunnel

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

GoGo ModulesMIT Licensetunnelping
3.7k599
matro7sh/BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

avbypass
matro7sh.github.io/BypassAV/
3.4k374
tegal1337/CiLocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

HTMLGNU General Public License v3.0bypassbruteandroid
3k538