WEEVELY(1)

📦
version 4.0.2 · 2 versions
, in debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 WEEVELY(1) 💖

okay bestie, welcome to the User Commands section, this is the manual page for weevely and honestly? it's giving legend behavior 🫶

✨ NAME ✨

Weevely — a Weaponized web shell 💅

🌸 DESCRIPTION 🌸

So basically, weevely is a web shell that was built for post-exploitation purposes, and the way it eats is that it can be extended over the network at runtime. no cap. it grows. 🔥

Here's the vibe: you upload the weevely PHP agent to a target web server, and boom — you get remote shell access to it. Once you're connected, you have more than 30 modules at your disposal, and they help you with administrative tasks, maintaining access, providing situational awareness, elevating privileges, and spreading into the target network. like, it does all of that. 🧚✨

🎀 SYNOPSIS 🎀

Run terminal to the target — literally just point it at a URL and go:

weevely <URL> <password> [cmd]

Generate backdoor agent — make the lil baby agent:

weevely generate <password> <path>

Load session file — pick up where you left off:

weevely session <path>

🦋 Features 🦋

the feature list is lowkey stacked, no notes:

  • Shell access to the target 🐚
  • SQL console pivoting on the target
  • HTTP/HTTPS proxy to browse through the target
  • Upload and download files
  • Spawn reverse and direct TCP shells
  • Audit remote target security
  • Run Meterpreter payloads
  • Port scan pivoting on target
  • Mount the remote filesystem
  • Bruteforce SQL accounts pivoting on the target

👑 Agent 👑

the agent is a small, polymorphic PHP script that is hardly detected by AV, and the communication protocol is obfuscated within HTTP requests. sneaky little icon, we love her. 🙈

💀 Modules 💀

okay this is the main character section, 43 modules, we're not skipping a single one, periodt:

  • :audit_filesystem — Audit the file system for weak permissions.
  • :audit_suidsgid — Find files with SUID or SGID flags.
  • :audit_disablefunctionbypass — Bypass disable_function restrictions with mod_cgi and .htaccess.
  • :audit_etcpasswd — Read /etc/passwd with different techniques.
  • :audit_phpconf — Audit PHP configuration.
  • :shell_sh — Execute shell commands.
  • :shell_su — Execute commands with su.
  • :shell_php — Execute PHP commands.
  • :system_extensions — Collect PHP and webserver extension list.
  • :system_info — Collect system information.
  • :system_procs — List running processes.
  • :backdoor_reversetcp — Execute a reverse TCP shell.
  • :backdoor_tcp — Spawn a shell on a TCP port.
  • :backdoor_meterpreter — Start a meterpreter session.
  • :bruteforce_sql — Bruteforce SQL database.
  • :file_gzip — Compress or expand gzip files.
  • :file_clearlog — Remove string from a file.
  • :file_check — Get attributes and permissions of a file.
  • :file_upload — Upload file to remote filesystem.
  • :file_webdownload — Download an URL.
  • :file_tar — Compress or expand tar archives.
  • :file_download — Download file from remote filesystem.
  • :file_bzip2 — Compress or expand bzip2 files.
  • :file_edit — Edit remote file on a local editor.
  • :file_grep — Print lines matching a pattern in multiple files.
  • :file_ls — List directory content.
  • :file_cp — Copy single file.
  • :file_rm — Remove remote file.
  • :file_upload2web — Upload file automatically to a web folder and get corresponding URL.
  • :file_zip — Compress or expand zip files.
  • :file_touch — Change file timestamp.
  • :file_find — Find files with given names and attributes.
  • :file_mount — Mount remote filesystem using HTTPfs.
  • :file_enum — Check existence and permissions of a list of paths.
  • :file_read — Read remote file from the remote filesystem.
  • :file_cd — Change current working directory.
  • :sql_console — Execute SQL query or run console.
  • :sql_dump — Multi dbms mysqldump replacement.
  • :net_mail — Send mail.
  • :net_phpproxy — Install PHP proxy on the target.
  • :net_curl — Perform a curl-like HTTP request.
  • :net_proxy — Run local proxy to pivot HTTP/HTTPS browsing through the target.
  • :net_scan — TCP Port scan.
  • :net_ifconfig — Get network interfaces addresses.
bestie if you're using these on anything that isn't yours, that's not slay, that's a crime. be the main character, not the defendant. 💖

🌈 SEE ALSO 🌈

iykyk, the wiki is right there, go read it. 📖✨

💜 AUTHOR 💜

weevely is developed by The Weevely Developers. This manpage was made by Emilio <epinna> and Samuel Henrique <samueloph@debian.org>, based on weevely's README.md, and can be used by other projects as well. shoutout to them fr fr 🫶

and that's the whole page, babe 🎀 this was weevely 3.7.0, dated October 2018 — yeah she's an October 2018 girlie and she still serves 💅💖 bye bestie, stay safe out there 🌸🦋✨

📦 where this page comes from