Python 3.8+  ·  PHP 8.x CLI

p0wnyShellX

Static shell    Unique signature per deploy

bash — attacker
$
password
user
theme
transport
llm
company
context
junk
output
features
options
switch  12345678
Optional shell commands — compiled only when the matching flag is passed
revshell <IP> <PORT> [--method bash|python3|perl|php]
clearlog <file> <pattern>
portscan <target> <ports|minimal|web|top20|top100> [--stealth|--fast] [--timeout N] [--pause N]
pingsweep <target> [--ports minimal|web|full] [--stealth|--fast] [--timeout N] [--pause N]
sql <dsn> [user pass] <query> — PDO console: sqlite:/path.db or mysql:host=..;dbname=..
fetch <url> — fetch a URL from the target host (pivot recon, metadata endpoints)
Targets: single IP, CIDR, range, comma list — e.g. 192.168.0.0/24 or 10.0.0.1-50,172.16.0.1
Other flags
--no-auth — no login form / no session (magic file upload, quick tests)
--stdout — PHP to stdout, status messages to stderr (pipe-friendly)
-d <dir> — output directory, combined with -o <name.php>
--llm <provider[:model]> — optional LLM pool augmentation: ollama (local) | anthropic | openai | deepseek | kimi
--company "<name>" --context "<industry, country>" — target-context names (requires --llm; prefer ollama for opsec)