php-reverse-shell VS wappalyzer

"ubu" is my VM host, and "kali" is my local machine that has a reverse shell. However, when I run the above command on my machine, instead of getting access to the victim machine's shell, I am getting access to my own shell. I am using the shell code available at https://github.com/pentestmonkey/php-reverse-shell. Can you help me understand the reason behind this?

Using the same method as before, I used wget again to upload this PHP shell, and it worked when I navigated to it in the browser, which instantly gave me a shell.

The web is full of free PHP scripts, such as reverse shells, ready for use. Users only have to provide an IP (the attacker' server) and a port to listen connections. One of the most popular PHP shells is probably PenTest Monkey. It uses variables to store your custom configuration:

The code here we will replace it with php reverse shell Now we search on google “php reverse shell” and enter on first link PHP REVERSE SHELL Copy the code from this github repository and put here

please check your php-reverse-shell.php file permission I think its required root permission to edit it or if the problem continues then manually copy the whole program from here https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php

You can find it here. Link: https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php

The way I usually manually go about this is through a php reverse shell from pentestmonkey . All you have to do is login to the admin panel on the Wordpress site and replace the code in the 404 page with the reverse shell (don’t forget to change the IP and port variables in the shell). Then you set up your listener (you can use metasploit or just ‘nc -lvnp {port}’ and trigger the shell by visiting the 404 page.

Ooh and there is a cool Chrome extension called Wappalyzer. It detects which technologies, programming languages, frameworks and plugins are used of a certain website you are currently in.

If you ever run into his issue again and dont know how to view source code, https://www.wappalyzer.com/ is a nice plugin that can outline the tech stack for a website.

https://www.wappalyzer.com/ might be what you’re looking for

Next time, use this: https://www.wappalyzer.com/. It shows the tech stack of whatever website you put for the URL. For both of those sites, I didn't see any animation libraries detected. My guess would be pure JS or GSAP.

The easiest way is via tools like Wappalyzer that test the tech stack of a website and can detect which anti-bot is used on it.

Wappalyzer Chrome extension is my go to

There's a browser extension for that: https://www.wappalyzer.com/