weevely3

Provide a stealthy PHP webshell with post-exploitation modules for file operations and network scanning.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill weevely3
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: weevely3
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/shells/weevely3
Command: npx skills add https://github.com/AeonDave/malskill --skill weevely3

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a stealthy PHP webshell with advanced post-exploitation capabilities, allowing for comprehensive system interaction and control after initial compromise.

Core Features & Use Cases

  • Interactive Shell: Gain an interactive PHP shell on the target system.
  • Post-Exploitation Modules: Utilize over 30 modules for file operations, network scanning, pivoting, and persistence.
  • Use Case: After uploading a webshell via a vulnerability, use this Skill to explore the file system, scan the internal network, and establish a SOCKS5 proxy for further lateral movement.

Quick Start

Connect to the uploaded webshell at http://target.com/uploads/shell.php using the password 'MyPassword'.

Frequently Asked Questions about weevely3

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I maintain access to a compromised web server using a PHP webshell?▼

A PHP webshell provides a stealthy interactive shell on a compromised web server, allowing you to maintain access, execute OS commands, and manage files for post-exploitation persistence.

How can I pivot into an internal network after uploading a webshell?▼

After deploying a webshell, you can pivot into an internal network by utilizing built-in post-exploitation modules for network scanning and establishing a SOCKS5 proxy for lateral movement.

What can I do with a PHP webshell during post-exploitation?▼

During post-exploitation, a PHP webshell enables OS command execution, interactive shell access, file operations, network scanning, proxying, and auditing of PHP configurations on the target.

Are there webshells with built-in modules for file operations and network scanning?▼

Yes, this stealth PHP webshell includes over 30 post-exploitation modules specifically designed for file operations, network scanning, pivoting, and persistence on a compromised server.

How do I connect to an uploaded webshell to run OS commands?▼

To connect to an uploaded webshell and execute OS commands, target the specific URL path of the uploaded PHP file and authenticate using the designated webshell password.