⚠️ IMPORTANT WARNING: This tool is built strictly for authorized educational research and legal penetration testing. Using it on systems you don't own is illegal and completely unsupported by the author.
VoidGate is a lightweight PHP-based root file manager and command shell designed for system interaction and post-exploitation research. It gives you a clean, terminal-style panel with a custom dark UI (our signature "calm glow" theme) to manage files and run commands efficiently.
VoidGate lets you handle key system tasks right from your browser:
- 🖥️ Command Execution: Full remote command support via
shell_exec. - 📁 File Management: Upload, create, zip, and manage files easily.
- 🧨 Mass Operations: Includes optional Mass Defacement tools.
- 🌐 Network Analysis: Built-in tools like Port Scanner, Ping, WHOIS, DNS Lookup, and cURL Client.
- 🪜 Traversal: Symlink tools to navigate the server file system.
This repository is divided into three main subfolders, each with its own specific README.md for in-depth instructions:
| Folder | Content Focus | Where to find details |
|---|---|---|
YamiRoot_Series |
Contains the various versions of VoidGate (DX, Mini, Bypass) and their unique features. | Go to YamiRoot_Series/README.md |
Encoders |
Houses the KCK PolyGen polymorphic builder. Use this to generate unique, encrypted signatures for your scripts. | Go to Encoders/README.md |
tools_helper |
Houses specialized post-exploitation modules like Mass File Utilities, SMTP Tester, and advanced networking tools. | Go to tools_helper/README.md |
The latest addition to this repo is the KCK PolyGen (located in /Encoders/).
It is a polymorphic engine that helps researchers understand how malware evades static analysis (AV/EDR). It randomizes:
- Class & Function names.
- Internal variable signatures.
- XOR encryption keys.
- Logic flow within the stub.
Note: For maximum stealth during security assessments, it is recommended to use the tools in the
Encodersfolder to generate a fresh, randomized version of the shells found inYamiRoot_Series.
- A web server running PHP 5.6+.
- Crucial PHP functions (like
shell_exec,scandir, etc.) must not be disabled for full functionality.
- Upload
void.phpto your target environment. - Access it via your browser:
http://target.com/void.php
Use VoidGate only where you have explicit, legal permission. This tool is for learning and authorized testing. Use Responsibly.
Coded with 🖤 by 0x6ick