Creating an Emojis PHP WebShell
- 1 min
I recently came across an interesting behavior on PHP. PHP permits the usage of Unicode characters as variable names. Therefore, friendly emojis can be used as a PHP variable.
<?php
$😶="Hello World!";
echo($😶);
Output:
>> Hello World!
Which is valid.
I thought about making a fancy example of a PHP Web-Shell using emojis. This is made for entertainment purposes. No real advantage is gained by using Emojis Webshell. It may disturb/confuse a WAF or back-end parser, but it’s not confirmed against a real-world environment.
Usage
Usage can be as:
https://example.com/emojis-webshell.php?👽=pwd
You can create a CLI for it to do more; I am only publishing it as a proof of concept.
Download
[Download] Emojis web-shell: Link
Related Posts
