The software author can not be held responsible for actions of users of this software.
It is meant for administration of your own webservers and using them as proxies.
By downloading you agree to these terms.
PlainShell 0.2 download
Total of 11492 downloads
Developer version download
Total of 7575 downloads
PlainShell is a encrypted cgi proxy tunnel / HTTP test tool / administration tool ( backdoor-shell ;) ) written in PHP.
Its main features are:
PlainShell 0.1
It lets you surf (regularily or with raw http requests) the net through one or several webservers while encrypting the traffic between the first and last cgi proxy.
You can also see raw http response headers.
Encryption is of RSA 32 - 2048 bit. It uses Diffie-Hellmans key exchange to establish a secure tunnel between all proxy hosts.
Since it has to deal with big integers it requires GMP library to be loaded into php,
and because of that it is also possible to turn encryption off.
The first proxy host (browser.php) is the script that contains all the code, the possible second proxy hosts
only run a small ~20 line script (link.php) which runs the code that is sent run-time from the first proxy.
The communication is recursive so link.php can contact next link2.php which also can send code for execution forward.
The encryption and decryption code is also sent over network and executed in a small "backdoor" script.
The private and public keys (unfortunately) are saved (script rewrites itself to contain keys) in link.php because of the HTTP-s nature. (the client and browser
cant exchange information more then once in a same script).
When a web request is made through the proxy tunnel(s) then none of the addresses are saved in link.php scripts.
So the addresses are saved on-the-need to basis.
so when we have Your-Web-Browse -> browser.php -> link.php -> link2.php -> www.google.com sort of communication
then link2.php wouldnt know the address of browser.php.
The proxy list itself is encrypted when sent.
And at last you can run your custom PHP script within all proxy hosts (including browser.php).
browser.php and link.php can be renamed.
PlainShell 0.2
Support for making a chain of mix of variouse different types of proxys like SOCKS 4 and 5, port forwarding proxies.
Connection between your browser and first link (browser.php) is NOT encrypted.
The websurfing the regular way is quite undeveloped. Script does not know how to rewrite javascript or
url within CSS. it rewrites regular links,images, forms+cookies into usable form. but thats it.
Beware that javscript and CSS can sometimes still make your browser request few images from original site
DIRECTLY wihout any proxies between. So if you want to be absolutely shure of your anonymity then write the script
to save the requested pages safely so you can study the source or strip out all non vital tags and javascript.
The encryption keys are saved in link.php.
The encryption is slow, i havent found a cure yet. So you can unfortunately only use few links with encryption turned on.
My recommendation is running the browser.php locally.
Encryption implementation library used is from http://pear.php.net/package/Crypt_RSA
Rest of the code by Heintz @ www.plain-text.info.