Skip to content

Instantly share code, notes, and snippets.

@x0xman

x0xman/Web-shell.txt

Last active September 2, 2025 13:02
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save x0xman/cd1f17165bf96c88fd1c015a58bdc225 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save x0xman/cd1f17165bf96c88fd1c015a58bdc225 to your computer and use it in GitHub Desktop.
Download ZIP
a collection of name wordlist web-shell
Raw
Web-shell.txt
529.php
AK-74 Security Team Web Shell Beta Version.php
Andela 1C3 v3 (Private Release 2017).php
Antichat Shell. Modified by Go0o$E.php
Antichat Shell.php
Antichat_Shell_v1.3.php
Ayyildiz Tim -AYT- Shell v 2.1 Biz.php
Ayyildiz Tim Shell (Private Shell 2017).php
C99madShell v. 2.0 madnet edition.php
CasuS 1.5.php
Con7ext-Shell-V.2-l o l.php
CrystalShell v.1.php
Cyber Shell (v 1.0).php
DTool Pro.php
Dive Shell 1.0 - Emperor Hacking Team.php
Engineers Security (Private PHP Shell 2017).php
G-Security-Webshell.php
Update and rename simple_cmd.php to G-Security-Webshell.php
GFS_web-shell_ver_3.1.7_-_PRiV8.php
GRP WebShell 2.0 release build 2018 (C)2006,Great.php
Gamma Web Shell.php
IndoXploit.php
KAdot Universal Shell v0.1.6.php
Liz0ziM Private Safe Mode Command Execuriton Bypass Exploit.php
Loaderz WEB Shell.php
MackersPrivatePHPShell-encoded.php
MoroccanSpamersMa-EditioNByGhOsT-encoded.php
MySQL Web Interface Version 0.8.php
Mysql interface v1.0.php
NCC-Shell-encoded.php
NGH-encoded.php
NTDaddy v1.9.php
Non-alphanumeric.php
PHANTASMA-encoded.php
PHPRemoteView.php
PHPShell-encoded.php
PHVayv-encoded.php
PhpSpy Ver 2006.php
PinoyLULZSecPrivateShell2017.php
Predator-encoded.php
Rootshell.v.1.0-encoded.php
SHOR7CUTShellBETAKILLERencoded.php
Safe0verShell-SafeModBypassByEvilc0der-encoded.php
Safe_ModeBypassPHP4.4.2andPHP5.1.2-encoded.php
SimAttacker-Version1.0.0-encoded.php
SimShell1.0-SimorghSecurityMGZ-encoded.php
Simple_PHP_backdoor_by_DK-encoded.php
Sincap1.0-encoded.php
SmallWebShellbyZaCo-encoded.php
Stupidc0de Shell (2017).php
WHO AM I - MZRP105 (Private PHP Shell).php
Wordpress Mass Defacer (FUD 2017).php
aZRaiLPhp v1.0.php
accept_language.php
anonexploitershell.php
autoroot.php
b374k-mini-shell-php.php
b374kv2.1.php
b374v2.8-b374k.php
backupsql.php
bayz21-priv-shell-v1.php
bayz21-priv-shell-v2.php
bayz21-priv-shell-v3.php
berandal-owlsquad.php
bypass403.php
bypass529.php
Update bypass529.php
c0derz shell [csh] v. 0.1.1 release.php
c99_locus7s.php
c99_madnet.php
cpanel.php
cw.php
cybershell.php
dC3 Security Crew Shell PRiV.php
erne.php
ex0shell.php
fatal.php
ftpsearch.php
g00nshell-v1.3.php
h4ntu shell [powered by tsoi].php
hector-uploader.php
hiddens shell v1.php
indoxploit-mass-defacer.php
ironshell.php
jav-shellv1.1-maqlo.php
jca.php
k2ll33d.php
Update k2ll33d.php
kral.php
kuda-encoded.php
lamashell.php
lifkaS.php
load_shell.php
lolipop-encoded.php
lostDC-encoded.php
matamu-encoded.php
megabor-encoded.php
myshell-encoded.php
mysql_tool.php
nobody-uploader.php
nshell-encoded.php
pHpINJ-encoded.php
php-backdoor-encoded.php
php-include-w-shell.php
Update php-include-w-shell.php
php-reverse-shell.php
Update php-reverse-shell.php
pws.php
Update pws.php
qsd-php-backdoor.php
Update qsd-php-backdoor.php
rootshell.php
Update rootshell.php
ru24_post_sh.php
Update ru24_post_sh.php
s72 Shell v1.1 Coding.php
Update s72 Shell v1.1 Coding.php
safe0ver.php
Update safe0ver.php
securityghost-priv-Zero5.php
simattacker.php
Update simattacker.php
simple-php-backdoor.php
Update and rename simple-backdoor.php to simple-php-backdoor.php
simple-upload.php
simple-uploadv2.php
small.php
sym.php
wso-latest.php
wso2.7.php
wso2.8
b.php
r.php
s.php
u.php
y.php
k.php
l.php
i.php
o.php
m.php
j.php
c.php
z.php
q.php
e.php
w.php
t.php
r.php
f.php
d.php
ok.php
1.php
2.php
3.php
4.php
5.php
7.php
6.php
8.php
9.php
0.php
00.php
herp.php
nptice.php
tuyul.php
nikung.php
tertykung.php
codrs.php
jingan.php
chan.php
kntl.php
losX.php
mom.php
sad.php
uploads/ok.php
upload/ok.php
upload/up.php
upload/shell.php
upload/idx.php
upload/ind.php
upload/v.php
upload/sym.php
upload/gallers.php
upload/bekdur.php
upload/file/up.php
upload/file/wso.php
upload/file/test.php
upload/file/WSO.php
upload/file/123.php
upload/file/uploader.php
upload/file/upload.php
upload/file/zero.php
upload/file/ups.php
upload/file/tmp.php
upload/file/jump.php
upload/file/x.php
upload/file/X.php
upload/file/idx.php
upload/file/b3ca7k.php
upload/file/indo.php
upload/file/asu.php
upload/file/dhanush.php
upload/file/aaa.php
upload/file/az.php
upload/file/xxx.php
upload/file/curl.php
upload/file/root.php
upload/file/asu.php
upload/file/id.php
upload/file/minishell.php
upload/file/kill.php
upload/file/0.php
upload/file/alone.php
upload/file/hex.php
upload/file/500.php
upload/file/error.php
upload/file/406.php
upload/file/fuck.php
upload/file/zzz.php
images/WSO.php
images/dz.php
images/DZ.php
images/cpanel.php
images/cpn.php
images/sos.php
images/term.php
images/Sec-War.php
images/sql.php
images/ssl.php
images/mysql.php
images/WolF.php
images/madspot.php
images/Cgishell.pl
images/killer.php
images/changeall.php
images/2.php
images/Sh3ll.php
images/dz0.php
images/dam.php
images/user.php
images/dom.php
images/whmcs.php
images/vb.zip
images/sa.php
images/sysadmins/
images/admin1/
images/sniper.php
images/images/Sym.php
images//r57.php
images/gzaa_spysl
images/sql-new.php
images/shell.php
images/sa.php
images/admin.php
images/sa2.php
images/2.php
images/user.txt
images/site.txt
images/error_log
images/error
images/site.sql
images/vb.sql
images/forum.sql
images/r00t-s3c.php
images/c.php
images/backup.sql
images/back.sql
images/data.sql
images/tmp/vaga.php
images/tmp/killer.php
images/whmcs.php
images/abuhlail.php
images/tmp/killer.php
images/tmp/domaine.pl
images/tmp/domaine.php
images/useradmin/
images/tmp/d0maine.php
images/d0maine.php
images/tmp/sql.php
images/X.php
images/123.php
images/m.php
images/b.php
images/up.php
images/tmp/dz1.php
images/dz1.php
images/Symlink.php
images/Symlink.pl
images/joomla.zip
images/wp.php
images/buck.sql
includes/WSO.php
includes/dz.php
includes/DZ.php
includes/cpanel.php
includes/cpn.php
includes/sos.php
includes/term.php
includes/Sec-War.php
includes/sql.php
includes/ssl.php
includes/mysql.php
includes/WolF.php
includes/madspot.php
includes/Cgishell.pl
includes/killer.php
includes/changeall.php
includes/2.php
includes/Sh3ll.php
includes/dz0.php
includes/dam.php
includes/user.php
includes/dom.php
includes/whmcs.php
includes/vb.zip
includes/r00t.php
includes/c99.php
includes/gaza.php
includes/1.php
includes/d0mains.php
includes/madspotshell.php
includes/info.php
includes/egyshell.php
includes/Sym.php
includes/c22.php
includes/c100.php
includes/configuration.php
includes/g.php
includes/xx.pl
includes/ls.php
includes/Cpanel.php
includes/k.php
includes/zone-h.php
includes/tmp/user.php
includes/tmp/Sym.php
includes/cp.php
includes/tmp/madspotshell.php
includes/tmp/root.php
includes/tmp/whmcs.php
includes/tmp/index.php
includes/tmp/2.php
includes/tmp/dz.php
includes/tmp/cpn.php
includes/tmp/changeall.php
includes/tmp/Cgishell.pl
includes/tmp/sql.php
includes/0day.php
includes/tmp/admin.php
includes/L3b.php
includes/d.php
includes/tmp/d.php
includes/tmp/L3b.php
includes/sado.php
includes/admin1.php
includes/upload.php
includes/up.php
includes/vb.zip
includes/vb.rar
includes/admin2.asp
includes/uploads.php
includes/sa.php
includes/sysadmins/
includes/admin1/
includes/sniper.php
includes/images/Sym.php
includes//r57.php
includes/gzaa_spysl
includes/sql-new.php
includes//shell.php
includes//sa.php
includes//admin.php
includes//sa2.php
includes//2.php
includes//gaza.php
includes//up.php
includes//upload.php
includes//uploads.php
includes/shell.php
includes//amad.php
includes//t00.php
includes//dz.php
includes//site.rar
includes//Black.php
includes//site.tar.gz
includes//home.zip
includes//home.rar
includes//home.tar
includes//home.tar.gz
includes//forum.zip
includes//forum.rar
includes//forum.tar
includes//forum.tar.gz
includes//test.txt
includes//ftp.txt
includes//user.txt
includes//site.txt
includes//error_log
includes//error
includes//cpanel
includes//awstats
includes//site.sql
includes//vb.sql
includes//forum.sql
includes/r00t-s3c.php
includes/c.php
includes//backup.sql
includes//back.sql
includes//data.sql
includes/wp.rar/
includes/asp.aspx
includes/tmp/vaga.php
includes/tmp/killer.php
includes/whmcs.php
includes/abuhlail.php
includes/tmp/killer.php
includes/tmp/domaine.pl
includes/tmp/domaine.php
includes/useradmin/
includes/tmp/d0maine.php
includes/d0maine.php
includes/tmp/sql.php
includes/X.php
includes/123.php
includes/m.php
includes/b.php
includes/up.php
includes/tmp/dz1.php
includes/dz1.php
includes/forum.zip
includes/Symlink.php
includes/Symlink.pl
includes/joomla.zip
includes/joomla.rar
includes/wp.php
includes/buck.sql
includes/sysadmin.php
includes/images/c99.php
includes/xd.php
includes/c100.php
includes/spy.aspx
includes/xd.php
includes/tmp/xd.php
includes/sym/root/home/
includes/billing/killer.php
includes/tmp/upload.php
includes/tmp/admin.php
includes/Server.php
includes/tmp/uploads.php
includes/tmp/up.php
includes/Server/
includes/wp-admin/c99.php
includes/tmp/priv8.php
includes/priv8.php
includes/cgi.pl/
includes/tmp/cgi.pl
includes/downloads/dom.php
includes/webadmin.html
includes/admins.php
includes/bluff.php
includes/king.jeen
includes/admins/
includes/admins.asp
includes/admins.php
includes/wp.zip
includes/
upload.php
admin/upload.php
shell.php
up.php
uploader.php
a.php
123.php
test.php
minishell.php
0.php
wso.php
error_log
tools.php
r00t.php
admin/error_log
access_log
phpinfo.php
info.php
xxx.php
indo.php
idx.php
sym.py
dir/
lib/
tmp/
includes/
log/error_log
log/error.log
log/www-error.log
include/
Scripts/
test/
sym/root/home/
chonx_sym/
chonx_root/
web/
upload/
images/
img/
inc/
js/
php/
symlink/
sym/
idx_config/
config/
Log/
cox_config/
sym_config/
noname_config/
idx_symconf/
symconf/
root/
file/
files/
config.txt
asu.php
index.php
index.php/?login
db.php
README.txt
include/config.php
config.php
logs
indoxploit.php
index1.php
index.html
sh3ll.php
up.html
script.php
fuck.php
dir.php
406.php
403.php
500.php
accounts.php
bekdur.php
notfound.php
not_acceptable.php
1337.php
1n73ct10n.php
b374k.php
admin_home.php
home_admin.php
shell.php
zeeb.php
dz.php
xd.php
images/up.php
images/upload.php
files/up.php
file/upload.php
files/shell.php
files/uploader.php
files/indexx.php
file/up.php
file/uplod.php
file/wso.php
file/idx.php
file/up1.php
13.php
killer.php
Sh3ll.php
new.php
Sym.php
dom.php
zero.php
priv8.php
jembut.php
v4ga.php
backup.zip
s3c.php
madspotshell.php
sa.php
x.php
noname.php
kntol.php
WSO.php
IndoXploit.php
bajingan.php
c99.php
X.php
Good.php
pas.phtml
pas.php
abc.php
indexx.php
browse.php
up1.php
haha.php
z.php
gaza.php
sc.php
1234.php
fvck.php
error.php
0x.php
up.php5
shell.php5
inc/config.php
ix.php
-.php
id.php
r0x.php
bn.php
dm.php
gator.php
mail.php
mailer.php
perlcgi.pl
php.ini
modul.php
wso1.php
wp.php
configuration.php
c.php
tai.php
root.php
www.php
x13.php
ntaps.php
tools.php
zip.php
@.php
ea.php
aaaa.php
cinfo.php
by.php
celeng.php
jmbt.php
newfile.php
maho.php
mia.php
pro.php
qwe.php
shell_finder.php
11.php
cfinder.php
title.php
edit.php
s.php
wp.zip
xmlrpc.php
pasired.php
pass.php
adm.php
adminer.php
Cpanel.php
cpanel.php
noob.php
..php
b2.php
lol.php
Lol.php
dhanush.php
asw.php
mini.php5
ler.php
def.php
ex.php
noname.php
unknown.php
anon.php
sel.php
extremecrw.php
indx.php
14.php
6.php
angel.php
bv7binary.php
c100.php
r57.php
webroot.php
h4cker.php
gazashell.php
locus7shell.php
syrianshell.php
injection.php
cyberwarrior.php
ernebypass.php
g6shell.php
pouyaserver.php
saudishell.php
simattacker.php
sosyeteshell.php
tryagshell.php
uploadshell.php
wsoshell.php
zehir4shell.php
lostdcshell.php
commandshell.php
mailershell.php
cwshell.php
iranshell.php
indishell.php
g6sshell.php
sqlshell.php
simshell.php
tryagshell.php
zehirshell.php
k2ll33d.php
b1n4ry.php
12.php
default.php
blank.php
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment