discovered 03 Aug 2026
non-alphanumeric-webshell
→ View on GitHubThe Non-Alphanumeric WebShell in PHP is a tool designed to execute code on a server by exploiting certain user input vulnerabilities, particularly targeting web application firewalls (WAFs) that filter common characters. Its notable feature is the ability to construct a functioning shell without relying on blocked alphanumeric characters, using techniques such as XOR operations and leveraging PHP's handling of arrays and string conversions. This tool serves as a proof of concept for code execution bypass methods in security testing scenarios.