nil0x42/phpsploit

Health v2 · maintenance only

Adoption not part of the score

2491 stars · 467 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PhpSploit is a full-featured command-and-control (C2) framework that persists on a webserver via a stealthy single-line PHP backdoor. It is a Python-based post-exploitation tool used in red team operations and penetration testing.

Use cases

• maintain persistent access to a compromised webserver
• run a C2 framework over a PHP webshell
• perform post-exploitation on a web application during a pentest
• set up stealth backdoor persistence on a PHP server
• red team command and control over HTTP
• escalate privileges on a compromised web host

When to choose

• you need a stealthy PHP-based webshell with C2 capabilities for authorized red team engagements
• you want a mature, Kali-packaged post-exploitation framework for webserver persistence

When to avoid

• you need a general-purpose web vulnerability scanner rather than a post-exploitation C2 tool
• your target stack is not PHP-based
• you lack explicit authorization to test the target system

Facets

cli-tool · maturity active

security penetration-testing cli http-client security penetration-testing web-development developer-tools python cli c2-framework webshell red-team post-exploitation php-backdoor persistence hacking-tool linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nil0x42/phpsploit")