Post Exploitationremote managementphp shellfile managercommand executionshelldbmspacket crafter

b374k

b374k is a PHP-based remote management tool that provides comprehensive system administration capabilities through a web browser without needing cpanel, SSH, or FTP. It includes features like file management, command execution, shell access, and database connectivity all in a single file.

Description

b374k serves as a versatile PHP shell for remote management, enabling web or system administrators to perform various tasks directly in a browser. It eliminates the need for traditional access methods like SSH or FTP, making it ideal for quick remote administration in constrained environments.

Key use cases include file operations such as viewing, editing, renaming, deleting, uploading, downloading, and archiving. It supports searching files, content, and folders with regex, executing commands and scripts in multiple languages (PHP, Perl, Python, Ruby, Java, Node.js, C), and providing bind/reverse shell access.

Additional functionalities encompass a simple packet crafter, connections to various DBMS like MySQL, MSSQL, Oracle, SQLite, PostgreSQL via ODBC or PDO, SQL exploration, process management, sending emails with attachments, and string conversion. No installation is required beyond placing the single file, with a small footprint of 494 KB.

How It Works

b374k operates as a single PHP file (index.php) located in /usr/share/b374k, providing a web-based interface for all features. It handles actions like file management, command and script execution, shell connections, packet crafting, DBMS interactions via ODBC/PDO, process listing, and email sending entirely through browser interactions, leveraging PHP's server-side capabilities without additional setup.

Installation

bash
sudo apt install b374k

Flags

-hDisplay help information for b374k

Examples

Shows the help menu for the b374k remote management tool
b374k -h
Installs the b374k package on Kali Linux
sudo apt install b374k
Lists the directory structure including base, index.php, module, and theme
ls /usr/share/b374k
Views the main PHP shell file for remote management
cat /usr/share/b374k/index.php
Starts the b374k tool, likely launching the web-based interface
b374k
Locates PHP files in the b374k installation directory
find /usr/share/b374k -name '*.php'
Updated 2026-04-16kali.org ↗