weevely
Stealth tiny web shell
persistenceRed Team
Matches ATT&CK tactic: Persistence ↗
ToolpersistenceredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
Weevely is a stealth PHP web shell that simulate telnet-like connection. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install weevely`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
