webshell

Spug is a lightweight agent-free automatic operation and maintenance platform designed for small and medium-sized enterprises. It integrates host management, host batch execution, host online terminal, file management, application release and deployment, pipelines, online task planning, configuration center, monitoring, alarm and so on.

A webshell framework for penetration testers.

Linux, in your browser

利用 webshell 创建交互式终端(Create an interactive terminal with webshell.)

Modular single-file web shell framework with pure-PHP recon, SOCKS5 pivoting, and per-build fingerprinting

SpringBoot管理后台项目脚手架

🔥 Client shell to exploit php eval()

AntSword 无命令执行权限下获取网络连接情况插件

使用互联网前端技术且完全开源。由html,Javascript,css渲染的基于Web的高级命令行终端、设计用于社会工程学辅助、个人信息收集、web攻防辅助。支持使用http服务器远程使用；支持移动和PC端设备使用；支持多人多设备在线使用。同时在装逼方面设计也是别处一格，你可以选择随便输入命令，但是它的装逼程度绝对令人佩服。你可以通过Web来查询你所需要的网站信息等，运行在云端的辅助工具。

StealthSword（隐剑）— AntSword v2.1.16 二开，PHP AES-256-GCM 隐蔽通道 + OOB 密钥分发 + 5 类动态混淆

AntSword 插件，复制选中的WebShell配置到剪贴板。

Endpoint based developer tools - Extension of kebab-os

Matrix Terminal + Tetris combined

基于 Go + Web 的开源 WebShell 管理工具：节点管理、文件操作、虚拟终端、命令执行、反弹 Shell 监听与数据库操作，单文件跨平台部署，适用于授权安全测试与自有资产管控。

Find and remove web malware, webshells, and backdoors. A fast, dependency-free malware scanner and quarantine tool by JayHackPro.

manage your server by web! be is nodejs

🔨 WebShell Forge — Turn plain HTML, CSS, and JS into native Android APKs locally. Form or CLI in, installable app out.

A browser-based interactive terminal webshell written in Node.js. Designed for authorized CTF competitions and authorized security research environments where you need a full PTY shell via a single file upload — no dependencies, no reverse shell payload, no web framework required, zero npm packages needed.