Weevely 0.6 released!

The BackBox Team is proud to announce the release 0.6 of Weevely!

Weevely is a stealth PHP web shell that simulate telnet-like connection. It is an essential tool for web application post exploitation, and could be used like an hidden backdoor and as a useful telnet-like console replacement to manage web accounts, even if hosted in free hosting services. Just generate and upload the “server” PHP code on the target web server, and run Weevely client locally to transmit shell commands.

What’s new

  • Backdoor communications are hidden in Cookie requests
  • Communications are encoded using NIDS evasion techniques (any request is randomly obfuscated to bypass signature detection)
  • Backdoor PHP code is polymorphic to obfuscate functions commonly used in backdoors
  • Modular architecture have about 30 modules for every kind of maintain access/post exploit task
  • Modules implement different techniques to accomplish single tasks to mitigate disabled_functions, safe_mode and other PHP restrictions

BackBox protests agains SOPA/PIPA

Imagine a World without Free Knowledge… Right now, the U.S. Congress is considering legislation that could fatally damage the free and open Internet. For 24 hours, to raise awareness, we are blacking out Backbox.

BackBox Xmas greetings!

Gents,

would like to wish everyone the best of happy Xmas and new year. The next year would be the big year of BackBox. We are expecting no more than what we have already done together in all this time. So, keep going like that.

Happy Hacking!