weevely
Generates and drives stealthy, encrypted PHP webshells.
Generator and client for stealthy PHP webshells (encrypted and obfuscated) with 30+ post-exploitation modules: upload/download files, enumerate, pivot and run commands over the deployed shell.
Family Web exploitation
Flags generate <pass> shell.php
Concepts File Upload to RCE
Cheatsheet File upload to RCE
Installation
apt install weevelyUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.