xorshell

Reject all things fancy, Only encoder PHP webshell to bypass WAF using XOR operations.

Usage

Usage：python3 -m/--method [GET\POST] -p/--password [password] -o/--ouput [output filename]

Example

Generate a shell with default parameters

python3 xorshell.py

Generate a shell , use POST as method and "c1" as password , Output to file with name "xor_shell_eval.php"

python3 xorshell.py -m post -p c1 -o xor_shell_eval.php

Show

A simple show

VirusTotal result

Refer

XORpass - https://github.com/devploit/XORpass