> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/red-teaming/exploitation/php-webshells.md).

# PHP Webshells

## wso-4.2.5

If there exists file upload vulnerability, try uploading this webshell:

{% embed url="<https://github.com/tennc/webshell/blob/master/php/wso/wso-4.2.5.php>" %}
wso-4.2.5
{% endembed %}

The default password is "admin".

## p0wny

p0wny is a PHP webshell that simulates an interactive shell:

{% embed url="<https://github.com/flozz/p0wny-shell>" %}
p0wny
{% endembed %}