🏴‍☠️ PwnX.py

Pwn misconfigured sites running ShareX custom image uploader API through RFI -> RCE.

XAMPP running as SYSTEM kek

🗂️ Requirements

• Python 3
• Git (optional)

⚙️ Installation

1. Clone the repository: $ git clone https://github.com/ecriminal/PwnX.py.git or manually download it here
2. Go to the cloned repository: $ cd PwnX.py
3. Install the required Python packages: $ python3 -m pip install -r requirements.txt
4. Run PwnX.py: $ python3 PwnX.py

📝 TODO

• Encode PHP web shell payload to bypass WAFs and AVs
• Custom PHP web shell payload command-line option
• File upload feature in built-in PHP web shell
• File download feature in built-in PHP web shell
• Change direction feature in built-in PHP web shell
• Auto remove PHP web shell
• Save web shells to file