weevely

No entries match these filters. Clear filters

1. v4.0.3 Oct 1, 2025 · release notes

   Adds installation via uv

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.0.3 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout v4.0.3

   └──▷ USE IT
   Install weevely v4.0.3 quickly using the uv package manager.
   shell copy

   uv tool install weevely==4.0.3

   • Allow installation using uv

   1 detail in Everything

2. v4.0.0 Dec 26, 2019 · release notes

   weevely v4.0.0 drops legacy formats, fixes modules, ports to Python 3

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.0.0 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout v4.0.0

   • Drops LegacyCookie, LegacyReferrer, and Stegaref backdoor formats.
   • Removes the backdoor_meterpreter module.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The LegacyCookie, LegacyReferrer, and Stegaref legacy backdoor formats are no longer supported.
   • !The backdoor_meterpreter module is removed.
3. v3.4 Nov 2, 2016 · release notes

   Weevely v3.4 adds Backdoor_metasploit and System_procs modules plus PostgreSQL schema support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.4 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout v3.4

   └──▷ TRY IT
   Generate a Metasploit-compatible backdoor payload using the new module.
   copy

   $ weevely generate <password> output.php --module=Backdoor_metasploit

   Connect to a PostgreSQL database and specify the target schema.
   copy

   $ weevely http://target/shell.php <password> --db-schema=myschema

   • Adds Backdoor_metasploit module for generating Metasploit-compatible payloads
   • Adds System_procs module by @paddlesteamer for system process interaction
   • Enables database/schema selection for PostgreSQL connections

   3 details in Everything

4. v3.3.1 May 12, 2016 · release notes

   weevely v3.3.1 adds Clearlog, Mail, disable_function bypass modules and socat vector

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.3.1 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout v3.3.1

   • Adds Clearlog module to clear system logs via the shell session
   • Adds Mail module for sending email through the compromised shell
   • Adds disable_function bypass module to execute commands despite PHP disable_function restrictions
   • Adds Socat vector option in the backdoor_tcp module for alternative TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. reverse shells
   • Adds Legacycookie generator for creating compatible session cookies

   +1 more show less

   • Adds simulate and content options to the Upload2web module for controlled file uploads

   6 details in Everything

5. v3.2.0 Jun 29, 2015 · release notes

   weevely v3.2.0 adds proxy/SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. support, session variable management, and new sql/file_grep capabilities

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2.0 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout v3.2.0

   • Adds proxy and socks configuration options to route traffic through a proxy or SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. server
   • Adds session variables commands: show to list current variables and unset to remove them
   • Adds encoding support for sql_console to handle specific character sets in database interactions
   • Adds output redirection (>) and inverse grep (!grep) capabilities to the file_grep action

   4 details in Everything

6. 3.1.0 Apr 7, 2015 · release notes

   weevely 3.1.0 adds bruteforce_sql, direct CLI command execution, and new OS aliases

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.1.0 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout 3.1.0

   └──▷ TRY IT
   Execute a system enumeration command immediately after connecting without entering the interactive prompt.
   copy

   $ weevely.py target_url password -c 'uname -a'

   • Adds bruteforce_sql module for credential discovery against SQL services
   • Enables direct command execution via weevely.py -c flag without interactive shell entry
   • Adds whoami, hostname, pwd, and uname aliases to the embedded command set
   • Adds file_cp module for remote file copy operations

   4 details in Everything

7. 3.0.0 Jan 17, 2015 · release notes

   Weevely 3.0 adds extensive new modules for SQL, file system, networking, and backdoor operations.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.0.0 https://github.com/epinna/weevely3.git
   # already have the repo? check out this version:
   $ git checkout 3.0.0

   • Adds sql_dump module for database content extraction
   • Adds sql_console module for interactive SQL execution
   • Adds bruteforce_sqlusers module for credential enumeration
   • Adds bruteforce_sql module for database credential brute-forcing
   • Adds file_mount module to mount remote file systems

   +23 more show less

   • Adds file_enum module for directory enumeration
   • Adds file_download module to retrieve remote files
   • Adds file_touch module to modify file timestamps
   • Adds file_rm module to remove remote files
   • Adds file_edit module to edit remote files in place
   • Adds file_read module to read remote file contents
   • Adds file_upload module to upload local files to the target
   • Adds file_upload2web module to upload files via web forms
   • Adds backdoor_reversetcp module for reverse TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. shell persistence
   • Adds backdoor_tcp module for bind TCP shell persistence
   • Adds audit_suidsgid module to find SUID/SGIDSUID/SGIDUnix permission bits that make an executable run as its owner (SUID) or group (SGID) rather than the invoking user, letting cyber tools escalate or audit privilege boundaries without requiring a full root shell. binaries
   • Adds file_find module for advanced file searching
   • Adds audit_filesystem module for filesystem integrity checks
   • Adds audit_phpconf module to audit PHP configuration
   • Adds audit_etcpasswd module to dump the password file
   • Adds net_phpproxy module to use the target as an HTTP proxy
   • Adds net_ifconfig module to retrieve network interface information
   • Adds net_proxy module for generic proxy capabilities
   • Adds net_scan module for port scanning
   • Adds file_grep module for searching file contents
   • Adds net_curl module to execute HTTP requests from the target
   • Adds file_zip, file_tar, file_gzip, and file_bzip2 modules for compression tasks
   • Adds support for LegacyCookie and LegacyReferrer channels

   28 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The audit_userfiles module has been removed
   • !The audit_mapwebfiles module has been removed