---
description: Doughnuts可以做到许多事情,比如...
---

# 进阶

_**在通过Doughnuts连接至您的webshell之后，您可以借助Doughnuts完成许多事情。这边来，我会将您引入Doughnuts的国度！**_



### _**命令大纲**_

#### 通用

{% content-ref url="jin-jie/tong-yong-ming-ling" %}
[tong-yong-ming-ling](jin-jie/tong-yong-ming-ling)
{% endcontent-ref %}

| Commands     | Description                                                   |
| ------------ | ------------------------------------------------------------- |
| cls / clear  | Clear screen                                                  |
| debug        | Open / Close Debug switch                                     |
| ? / help     | Output the help document for the command or all help menu     |
| log          | (Only for \*unix) Write input and output to the log           |
| ! / lsh      | Run a command on local machine                                |
| sw  / switch | (for input Non-alphanumeric) Switch input to raw input        |
| proxy        | Set proxy for requests                                        |
| get          | Get variable(s), use #{varname} to use it                     |
| set          | Set variable, use #{varname} to use it                        |
| save         | Save the configuration of the variable(s) to variables.config |
| reload       | Reload a plugin                                               |
| q / quit     | Quit this program                                             |

#### **main**

{% content-ref url="jin-jie/main" %}
[main](jin-jie/main)
{% endcontent-ref %}

| Commands            | Description                                  |
| ------------------- | -------------------------------------------- |
| s / show            | Show log webshells                           |
| se / show\_encoders | Show available encoders                      |
| gen / generate      | Generate a webshell using doughnuts encoding |
| l / load            | Load a webshell from log                     |
| c / connect         | Connect to a webshell                        |
| check               | Check if each webshell is alive              |
| rm / remove         | Remove a webshell log                        |

#### webshell

{% content-ref url="jin-jie/webshell" %}
[webshell](jin-jie/webshell)
{% endcontent-ref %}

**COMMON**

{% content-ref url="jin-jie/webshell/common" %}
[common](jin-jie/webshell/common)
{% endcontent-ref %}



| Commands     | Description                                     |
| ------------ | ----------------------------------------------- |
| i / info     | Show website information                        |
| env / getenv | print PHP environment variables by ini\_get     |
| ls / dir     | List information about the files                |
| pdf          | Print disable functions                         |
| pwd          | Print the name of the current working directory |
| cd           | Change the working directory                    |

**SHELL**

{% content-ref url="jin-jie/webshell/shell" %}
[shell](jin-jie/webshell/shell)
{% endcontent-ref %}

| Commands       | Description                                                                                                                 |
| -------------- | --------------------------------------------------------------------------------------------------------------------------- |
| bs / bindshell | Bind a port and wait for someone to connect to get a shell                                                                  |
| re / reverse   | Reverse shell                                                                                                               |
| rs / reshell   | (Only for both system is linux) (Testing command) Bind a local port and waiting for target connect back to get a full shell |
| s / shell      | Get a temporary shell of target system by system function or just run a shell command                                       |
| ws / webshell  | Get a webshell of target system or just run a webshell command                                                              |
| exec / execute | Execute custom php code                                                                                                     |

**FILE**

{% content-ref url="jin-jie/webshell/file" %}
[file](jin-jie/webshell/file)
{% endcontent-ref %}

| Commands     | Description                                                                                                          |
| ------------ | -------------------------------------------------------------------------------------------------------------------- |
| c / cat      | Read file/files                                                                                                      |
| w / write    | Write file                                                                                                           |
| e / edit     | Modify file                                                                                                          |
| u / upload   | Upload file                                                                                                          |
| d / download | Download file                                                                                                        |
| mv / move    | Rename file or move it to new\_file\_path                                                                            |
| rm / remove  | Delete target system file(s)                                                                                         |
| chmod        | (Only for \*unix) Changes file mode                                                                                  |
| t / touch    | (Only for \*unix) Specify a file whose modification time stamp is the same as a random file in the current directory |
| dump         | Package and compress files in a folder and download it                                                               |

**DETECT**

{% content-ref url="jin-jie/webshell/detect" %}
[detect](jin-jie/webshell/detect)
{% endcontent-ref %}

| Commands | Description                                      |
| -------- | ------------------------------------------------ |
| search   | Search file by glob, pattern support . \* \[...] |
| fwpf     | Search writable php file                         |

**DATABASE(MYSQL)**

{% content-ref url="jin-jie/webshell/database-mysql" %}
[database-mysql](jin-jie/webshell/database-mysql)
{% endcontent-ref %}

| Commands    | Description                                |
| ----------- | ------------------------------------------ |
| db\_init    | Initialize the database connection         |
| db\_info    | Output database information                |
| db\_use     | Change current database                    |
| db\_dbs     | Output all databases                       |
| db\_tables  | Output all tables of a database            |
| db\_columns | Output all columns of a table              |
| db\_shell   | Get a temporary sql shell of target system |
| db\_dump    | Dump a database to a file                  |

**OHTER**

{% content-ref url="jin-jie/webshell/other" %}
[other](jin-jie/webshell/other)
{% endcontent-ref %}

| Commands      | Description                                                          |   |
| ------------- | -------------------------------------------------------------------- | - |
| ag / agent    | Intranet agent                                                       |   |
| bobd          | (Only for \*unix) Try to bypass open\_basedir by ini\_set and chdir  |   |
| bdf           | Try to bypass disable\_functions                                     |   |
| ps / portscan | Scan intranet ports                                                  |   |
| checkvm       | Simply check whether the machine is a virtual machine                |   |
| socks         | (Only for \*unix) Run a socks5 server on the target system by python |   |





