# epinna/weevely3

Weaponized web shell

Repository: https://github.com/epinna/weevely3
Canonical: https://ross.abutalabs.com/products/weevely3
Language: Python
License: GPL-3.0
License Family: copyleft
Last push: 2025-10-01T12:01:49+00:00

## Health v2 (maintenance only)
Score: 46/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 44, release rhythm 18, longevity 100
- inputs: {"age_days": 4365, "days_push": 336, "days_rel": 336, "gap_med": null, "n_releases_24m": 1}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3533, forks 624 (observed 2026-08-28T04:08:09.002042+00:00)

## What it is
Weevely is a weaponized web shell for post-exploitation that generates a small obfuscated PHP agent to upload to a target web server, providing remote shell access over HTTP. It includes 30+ modules for privilege escalation, file management, SQL pivoting, port scanning, and network spreading.

## Use cases
- generate a stealthy php web shell for a pentest
- get remote shell access to a compromised web server
- maintain persistence on a target host during post-exploitation
- pivot through a web server to scan internal network
- bruteforce sql credentials on a target
- bypass php disable_function restrictions
- tunnel http traffic through a target server

## When to choose
- you need a stealthy, extensible web shell for authorized penetration testing
- you want post-exploitation modules (privilege escalation, pivoting, file ops) in one tool
- you need communication obfuscated within normal HTTP requests to evade AV detection

## When to avoid
- you need a general-purpose reverse shell framework without a web server entry point
- you want a defensive tool for detecting or removing web shells
- unauthorized use - this is an offensive security tool for legal engagements only

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, http-client, cli
- domain: security, penetration-testing, developer-tools
- platform: python, cli, windows
- tags: web-shell, post-exploitation, php-agent, red-team, offensive-security, remote-shell, command-line, linux, macos

## Member repositories
- epinna/weevely3 (main) score 46

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:09.002042+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:35:04.481905+00:00, confidence not recorded.
  - readme: https://github.com/epinna/weevely3 (fetched 2026-08-28T04:08:09.002042+00:00, sha 85aac7dbf057)
- Data as of 2026-08-30T08:39:29.467469+00:00.