Ross ROSS = Recommend OSS · open-source software intelligence for agents

Arrexel/phpbash

A semi-interactive PHP shell compressed into a single file. observed · 2026-08-28

github.com/Arrexel/phpbash · PHP · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

32/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3200
  • days_rel: n/a
  • days_push: 3122
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1102 stars · 200 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

phpbash is a standalone, semi-interactive web shell written in PHP and packaged as a single file. It is designed to assist penetration testers when traditional reverse shells are not possible, providing a browser-based terminal with command history and file upload.

Use cases

  • get a shell on a target during a penetration test when reverse shells are blocked
  • run commands on a compromised web server through a browser
  • upload files to a target web server via a web shell
  • maintain a semi-interactive terminal session over HTTP POST requests
  • drop a single-file shell on a PHP host for quick access

When to choose

  • you need a web shell that requires only one PHP file
  • reverse shells are not possible in the target environment
  • you want a Kali-style terminal interface in the browser with command history and file upload

When to avoid

  • you need a fully interactive shell with PTY support
  • the target does not allow shell_exec or similar PHP functions
  • you need a maintained tool with recent updates or support for modern PHP

Facets

application · maturity maintenance

security cli file-upload penetration-testing security web-development php browser web-shell pentest reverse-shell-alternative single-file web-server linux

1 source

Member repositories

RepositoryRoleHealth v2
Arrexel/phpbashmain32

For agents

markdown · JSON · MCP: product_card(name="Arrexel/phpbash")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem