b374k/b374k

Health v2 · maintenance only

Adoption not part of the score

2657 stars · 757 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

b374k is a single-file PHP webshell providing browser-based remote server management, including a file manager, command and script execution, bind/reverse shells, and database connectivity. It is packaged via a PHP packer script and is commonly used in penetration testing and, unfortunately, by attackers.

Use cases

• manage a remote server from a browser without ssh or ftp
• run shell commands and scripts on a web host through a web interface
• browse, edit, upload and download files on a server via a web file manager
• connect to mysql or other databases from a compromised or authorized web server
• establish a reverse shell from a web server during a penetration test
• pack a customizable single-file php shell with a custom password

When to choose

• you are a pentester or red-teamer who needs a compact single-file php webshell
• you are a sysadmin who wants browser-based remote management of a server you own
• you need a lightweight shell supporting many scripting languages and DBMS connections in one file

When to avoid

• you need a legitimate, auditable remote administration tool for production servers
• your hosting provider or security policy prohibits webshells
• you require ongoing support or frequent updates - the project is in maintenance with sparse releases
• you run modern PHP versions only, as the shell targets PHP 4.3.3+ and PHP 5 era features

Facets

application · maturity maintenance

security http-server file-system database cli security penetration-testing web-development developer-tools php browser cross-platform webshell php-shell remote-administration pentesting red-team single-file reverse-shell file-manager web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="b374k/b374k")