webshell-chain

Overview ¶

Command webshell-chain demonstrates the M2 chain end to end: a confirmed command-injection point becomes a session you can run commands in.

cmdi_probe      the injection point echoes a unique marker back
cmdi_execute    run a real command through it (id)
webshell_deploy write a shell through the same primitive
session_open    register the dropped shell as a webshell session
session_exec    run id inside that session

It runs against a local in-process target (examples/lab) that binds to loopback only. Point it at the real PHP container described in STATE.md with

go run ./examples/webshell-chain -base http://127.0.0.1:PORT -dir /path/to/webroot

Nothing in this example reaches the network beyond loopback.