Reject all things fancy, Only encoder PHP webshell to bypass WAF using XOR operations.
Usage：python3 -m/--method [GET\POST] -p/--password [password] -o/--ouput [output filename]
Generate a shell with default parameters
./xor.py
./xor
if flask isnt installed launch:
pip install -r req.txt --force
Generate a shell , use POST as method and "c1" as password , Output to file with name "xor_shell_eval.php"
./xor.py -m post -p c1 -o xor_shell_eval.php
A simple show
VirusTotal result
XORpass - https://github.com/devploit/XORpass
