l3m0n/Bypass_Disable_functions_Shell

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1193 stars · 255 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A PHP webshell that collects various techniques for bypassing PHP's disable_functions restriction to achieve command execution, including LD_PRELOAD, pcntl_exec, FastCGI, COM, and Apache mod_cgi methods. It also ships with Docker test environments, bypass explanations, and exploit scripts.

Use cases

• bypass disable_functions in PHP to run commands
• execute commands when exec and system are disabled
• test which PHP functions are blocked by a hardened server
• learn LD_PRELOAD and FastCGI bypass techniques
• set up a Docker lab to test PHP disable_functions exploits
• build a comprehensive disable_functions blocklist for hardening

When to choose

• you are doing authorized penetration testing or red teaming on a PHP target
• you need a reference collection of disable_functions bypass exploits in one place
• you want to verify your server's disable_functions hardening against known bypasses

When to avoid

• you need a general-purpose webshell or C2 framework
• you want a maintained tool with a license and active development
• your target is not PHP
• you cannot legally test the target system

Facets

cli-tool · maturity maintenance

penetration-testing security security penetration-testing developer-tools php webshell disable-functions-bypass php-exploitation red-team post-exploitation exploitation web-server linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="l3m0n/Bypass_Disable_functions_Shell")