Web Shell

Web Shell is a neat tool that lets you access a UNIX or Windows shell remotely through HTTP or HTTPS. It comes with two Perl scripts for both server and client sides, plus a C source code and a Java servlet for the server side. The client script is designed for console use, while the server scripts run as CGI or Servlet scripts on the target host.

How Does Web Shell Work?

The client part of Web Shell gives you a shell-like prompt. It wraps your commands into HTTP POST requests and sends them to the server's script directly, or through an HTTP proxy server.

The Server Side Magic

On the server side, it takes those commands from the HTTP POST requests, runs them, and then sends back the output as HTTP response messages. By default, it uses Xor to encode the HTTP data.

Key Features of Web Shell

Check out these cool features:

• SSL support


• Command line history support


• File upload/download capabilities


• A secret key to protect server script usage in HTTP messages


• Xor encoding for data flow


• Works smoothly through an HTTP proxy server

What's New in This Release?

This version includes:

• A new WSH server Java servlet version


• The "why is it enabled?" auth in wsh-c.conf has been disabled


• Fixed some header field errors in wsh-c-* (changed X-* to HTTP_X*)

Getting Started with Web Shell

If you're ready to dive in, here's how:

1. Check the path to Perl in your config.pl


2. Run ./config.pl


3. If you want to use an HTTP proxy, modify wsh-c.conf:
   
   use_proxy 1
   
   proxy_ip
   
   port
   
   Check other client options too!
   

You'll need to check paths and permissions for both Perl and other versions like C or Java servlet when setting things up.

If you're using SSL with wsh-c.pl, you can configure it to verify the server certificate CN. Just execute wsh-c.pl, and you'll see what CN is displayed!