PHPsploit is a command and control (C2) framework designed for maintaining persistent access to web servers through PHP-based backdoors. The framework operates by deploying a polymorphic PHP one-liner backdoor that communicates through HTTP headers to avoid detection. The tool includes over 20 plugins for automating privilege escalation tasks and bypassing PHP security restrictions. Core functionality includes remote command execution, filesystem browsing, file upload and download capabilities, remote file editing through local text editors, SQL console access, and reverse TCP shell spawning. PHPsploit incorporates stealth features such as obfuscated payload delivery, HTTP header-based communication tunneling, and support for HTTP/HTTPS/SOCKS4/SOCKS5 proxies. The framework is designed to evade log analysis and network intrusion detection system (NIDS) signature detection while operating within PHP safe-mode and other common security restrictions. The interface provides detailed help documentation and robust command-line functionality for managing compromised web servers and executing post-exploitation activities.