开源运维平台：面向中小型企业设计的轻量级无Agent的自动化运维平台，整合了主机管理、主机批量执行、主机在线终端、文件在线上传下载、应用发布部署、在线任务计划、配置中心、监控、报警等一系列功能。

This is a webshell open source project

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

🐛 Access your terminal from anywhere via the web.

Free, Secure, Distributed, Modern Control Panel for Minecraft and most Steam Game Servers.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

A collection of PHP backdoors. For educational or testing purposes only.

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。

Webshell && Backdoor Collection

绕过专业工具检测的Webshell研究文章和免杀的Webshell

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

从零学习Webshell免杀手册

Detect potentially malicious PHP files

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

Self contained htaccess shells and attacks

Guidance for mitigation web shells. #nsacyber

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Access your device's terminal from anywhere via the web.

a very fast brute force webshell password tool