name: SecLists Web-Shells
description: Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
SecLists Web-Shells
Description
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
Source: SecLists/Web-Shells
Repository: https://github.com/danielmiessler/SecLists
License: MIT
When to Use This Skill
Use this skill when you need:
- Web shell detection testing
- Security monitoring validation
- Malware analysis
- IDS/IPS signature testing
- Forensics research
⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
Key Files in This Skill
PHP shells - Common PHP web shellsASP/ASPX shells - Microsoft web shellsJSP shells - Java server pages shellsPython shells - Python-based shellsPerl shells - Perl web shells
Usage Example
# Access files from this skill
import os
# Example: Load patterns/payloads
skill_path = "references/Web-Shells"
# List all available files
for root, dirs, files in os.walk(skill_path):
for file in files:
if file.endswith('.txt'):
filepath = os.path.join(root, file)
print(f"Found: {filepath}")
# Read file content
with open(filepath, 'r', errors='ignore') as f:
content = f.read().splitlines()
print(f" Lines: {len(content)}")
Security & Ethics
Authorized Use Cases ✅
- Authorized penetration testing with written permission
- Bug bounty programs (within scope)
- CTF competitions
- Security research in controlled environments
- Testing your own systems
- Educational demonstrations
Prohibited Use Cases ❌
- Unauthorized access attempts
- Testing without permission
- Malicious activities
- Privacy violations
- Any illegal activities
Complete SecLists Collection
This is a curated subset of SecLists. For the complete collection:
Generated by Skill Seeker | SecLists Web-Shells Collection
License: MIT - Use responsibly with proper authorization
1---2name: seclists-web-shells3description: Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.4---5
6---
7name: SecLists Web-Shells
8description: Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
9---
10
11# SecLists Web-Shells
12
13## Description
14
15Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
16
17**Source:** [SecLists/Web-Shells](https://github.com/danielmiessler/SecLists/tree/master/Web-Shells)
18**Repository:** https://github.com/danielmiessler/SecLists
19**License:** MIT
20
21## When to Use This Skill
22
23Use this skill when you need:
24- Web shell detection testing
25- Security monitoring validation
26- Malware analysis
27- IDS/IPS signature testing
28- Forensics research
29
30**⚠️ IMPORTANT:** Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
31
32## Key Files in This Skill
33
34- `PHP shells - Common PHP web shells`
35- `ASP/ASPX shells - Microsoft web shells`
36- `JSP shells - Java server pages shells`
37- `Python shells - Python-based shells`
38- `Perl shells - Perl web shells`
39
40
41## Usage Example
42
43```python
44# Access files from this skill
45import os
46
47# Example: Load patterns/payloads
48skill_path = "references/Web-Shells"
49
50# List all available files
51for root, dirs, files in os.walk(skill_path):
52 for file in files:
53 if file.endswith('.txt'):
54 filepath = os.path.join(root, file)
55 print(f"Found: {filepath}")
56
57 # Read file content
58 with open(filepath, 'r', errors='ignore') as f:
59 content = f.read().splitlines()
60 print(f" Lines: {len(content)}")
61```
62
63## Security & Ethics
64
65### Authorized Use Cases ✅
66- Authorized penetration testing with written permission
67- Bug bounty programs (within scope)
68- CTF competitions
69- Security research in controlled environments
70- Testing your own systems
71- Educational demonstrations
72
73### Prohibited Use Cases ❌
74- Unauthorized access attempts
75- Testing without permission
76- Malicious activities
77- Privacy violations
78- Any illegal activities
79
80## Complete SecLists Collection
81
82This is a curated subset of SecLists. For the complete collection:
83- **Full repository:** https://github.com/danielmiessler/SecLists
84- **Size:** 4.5 GB with 6,000+ files
85- **All categories:** Passwords, Usernames, Discovery, Fuzzing, Payloads, Web-Shells, Pattern-Matching, AI, Miscellaneous
86
87---
88
89**Generated by Skill Seeker** | SecLists Web-Shells Collection
90**License:** MIT - Use responsibly with proper authorization
majiayu000