dotcppfile/daws

Advanced Web Shell

Hello everyone,

About

There's multiple things that makes DAws better than every Web Shell out there:

1. Bypasses Security Systems(IPS, WAFs,etc) like Suhosin(uses up to 20 php functions just to get a command executed).
2. Drops CGI Shells and communicate with them to bypass Security Systems.
3. Uses the SSH Authorized Keys method to bypass Security Systems.
4. Uses Shellshock in 2 methods to bypass Security Systems.
5. Is completely Post Based and uses a XOR Encryption based on a random key that gets generated with every new session + private base64 functions to bypass Security Systems.
6. Supports Windows and Linux.
7. Finds a writeable and readable directory and moves there if it's a web directory; DAws will output everything in that found directory.
8. Drops a php.ini and a .htaccess file that clears all disablers incase "suphp" was installed.
9. Has an advanced File Manager.
10. Everything is done automatically so there's nothing for the user to worry about.
11. Open Source.
12. and much more (check the source for more information; everything is well commented)

Credits:

1. dotcppfile
2. Aces who helped me code the old version of DAws
3. Vedu for checking and reporting bugs.

Blog:

1. https://dotcppfile.wordpress.com/

daws's Issues

question

how to run this script.
How to get authorization - if any

errors on php 7.1.11

Warning: A non-numeric value encountered in C:\xampp\htdocs\DAws.php on line 195
Fatal error: Uncaught Error: Class 'COM' not found in C:\xampp\htdocs\DAws.php:1747 Stack trace: #0 {main} thrown in C:\xampp\htdocs\DAws.php on line 1747

shell don't work

too suspicious

Do you think you could make a version that is a little less suspicious? Remove all the comments and change the name of the files it creates?

Warning Error

Warning: realpath(): open_basedir restriction in effect. File(/) is not within the allowed path(s): ...on line 1790

    <td>".floor((disk_total_space(realpath("/")))/(1073741824))." GB</td>

Is this something that should be fixed or is it okay?

DAws.php was not found on this server.

Error on running

How to Extract Zip files

Hello,
Please how do i extract zip files in the file manager aftter uploading my file ??
i cant seem to find an uncompress or extract button

hey

I am testing DAws, i d love to know how to get past the fake error generated?

error

When i try to upload a file or create a folder, i get an error 404 Not Found.

Error After Uploading

Help!!!
am getting an error 404 after uploading DAWS files..
Not Found
The requested URL .../DAws.php was not found on this server.
Apache/2 at Port 80

Please what could be wrong??

Fake Error Page in XSS

https://github.com/dotcppfile/DAws/blob/master/DAws.php#L9

I catch \w Netsparker.