BeichenDream/Godzilla

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

4455 stars · 557 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Godzilla is a Java-based webshell management tool supporting dynamic payloads for JSP, ASPX, and PHP targets with multiple AES/XOR encryptors. It includes plugins for memory shells, virtual terminals, privilege escalation, credential harvesting, and Metasploit integration.

Use cases

• manage webshells on compromised web servers
• generate encrypted jsp aspx php webshells
• deploy memory shell into tomcat servlet container
• bypass disable_functions and open_basedir on php hosts
• escalate windows privileges from a webshell
• pivot to metasploit from a webshell session
• dump saved browser and database tool credentials

When to choose

• you need an all-in-one webshell manager with strong traffic encryption
• you want memory shell injection and MSF integration during red team operations
• you need multi-language payload support (Java, .NET, PHP, ASP) in one tool

When to avoid

• you need a defensive tool to detect webshells rather than deploy them
• you want a lightweight single-payload shell without a GUI framework
• your engagement requires a tool with an explicit open-source license

Facets

application · maturity active

penetration-testing security reverse-engineering penetration-testing security cross-platform jvm cli webshell webshell-manager red-team post-exploitation java csharp php asp memory-shell privilege-escalation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="BeichenDream/Godzilla")