---
description: wso, p0wny
---

# PHP Webshells

## wso-4.2.5

If there exists file upload vulnerability, try uploading this webshell:

{% embed url="https://github.com/tennc/webshell/blob/master/php/wso/wso-4.2.5.php" %}
wso-4.2.5
{% endembed %}

The default password is "admin".

## p0wny

p0wny is a PHP webshell that simulates an interactive shell:

{% embed url="https://github.com/flozz/p0wny-shell" %}
p0wny
{% endembed %}
