# b374k/b374k

PHP Webshell with handy features

Repository: https://github.com/b374k/b374k
Canonical: https://ross.abutalabs.com/products/b374k
Language: CSS
License: MIT
License Family: permissive
Last push: 2023-07-06T20:23:03+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 4619, "days_push": 1154, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2657, forks 757 (observed 2026-08-28T04:07:07.327327+00:00)

## What it is
b374k is a single-file PHP webshell providing browser-based remote server management, including a file manager, command and script execution, bind/reverse shells, and database connectivity. It is packaged via a PHP packer script and is commonly used in penetration testing and, unfortunately, by attackers.

## Use cases
- manage a remote server from a browser without ssh or ftp
- run shell commands and scripts on a web host through a web interface
- browse, edit, upload and download files on a server via a web file manager
- connect to mysql or other databases from a compromised or authorized web server
- establish a reverse shell from a web server during a penetration test
- pack a customizable single-file php shell with a custom password

## When to choose
- you are a pentester or red-teamer who needs a compact single-file php webshell
- you are a sysadmin who wants browser-based remote management of a server you own
- you need a lightweight shell supporting many scripting languages and DBMS connections in one file

## When to avoid
- you need a legitimate, auditable remote administration tool for production servers
- your hosting provider or security policy prohibits webshells
- you require ongoing support or frequent updates - the project is in maintenance with sparse releases
- you run modern PHP versions only, as the shell targets PHP 4.3.3+ and PHP 5 era features

## Facets
- artifact type: application
- maturity: maintenance
- function: security, http-server, file-system, database, cli
- domain: security, penetration-testing, web-development, developer-tools
- platform: php, browser, cross-platform
- tags: webshell, php-shell, remote-administration, pentesting, red-team, single-file, reverse-shell, file-manager, web-server

## Member repositories
- b374k/b374k (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:07.327327+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:18:27.092389+00:00, confidence not recorded.
  - readme: https://github.com/b374k/b374k (fetched 2026-08-28T04:07:07.327327+00:00, sha ee9b184309c7)
- Data as of 2026-08-30T08:39:29.467469+00:00.