Live briefing
Everything about Web shell
Interface enabling remote access to a web server
A web shell is a shell-like interface that facilitates remote access to a web server, commonly exploited for cyberattacks. Unlike traditional shells, it is accessed via a web browser, making it a versatile tool for malicious activities. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Web shellA 5-minute orientation
- Skim a recent paper: CWSOGG: Catching Web Shell Obfuscation Based on Genetic Algorithm and Generative Adversarial NetworkInfluential work since 2022
- Pick up a classic book: UNIX Web Server AdministrationThe most-reprinted book on the subject
- Read the landmark paper: Constructing Organizational Identities on the Web: A Case Study of Royal Dutch/Shell*Cited 136 times
- Go sideways: China ChopperA closely related topic
- Go sideways: Code injectionA closely related topic
📖 Definitions
Noun A shell-like interface for issuing commands to a compromised server.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Constructing Organizational Identities on the Web: A Case Study of Royal Dutch/Shell*
Lateral-torsional buckling of singly symmetric web-tapered thin-walled I-beams: 1D model vs. shell FEA
Effects of joint thickness, adhesion and web shells to the face shell bedded concrete masonry loaded in compression
Enhanced thermal performance of shell and tube phase change heat accumulator with novel biomimetic spider web fins
Core-shell design for nanocellulosic aerogels by bioinspired spider web-like structure
A Web Shell Detection Method Based on Multiview Feature Fusion
In-Plane Cyclic Response of New Urm Systems with Thin Web and Shell Clay Units
Core/shell structured carbon nanofiber/platinum nanoparticle hybrid web as a counter electrode for dye-sensitized solar cell
🆕 Influential since 2022
CWSOGG: Catching Web Shell Obfuscation Based on Genetic Algorithm and Generative Adversarial Network
Application of Deep Learning Algorithm for Web Shell Detection in Web Application Security System
Sub-Millisecond P95 Latency Parsing-Free Web Shell Detection on CPU With Byte Histograms and Split-Frequency Feature Selection
📚 Books worth reading
- 📕UNIX Web Server AdministrationJohn Leavitt, Linda Mui · 1997
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- China Chopper China Chopper is a web shell approximately 4 kilobytes in size, first discovered in 2012. This web shell is commonly used by malicious Chinese actors,…
- Code injection Code injection is a computer security exploit where a program fails to correctly process external data, such as user input, causing it to interpret the…
- Dorkbot (malware) Dorkbot is a family of malware worms that spreads through instant messaging, USB drives, websites or social media channels like Facebook. Code Shikara…
- Path traversal attack A directory traversal, path traversal, or dot-dot-slash attack exploits insufficient security validation or sanitization of user-supplied file names, such…
- Exploit (computer security) An exploit is a method or piece of code that takes advantage of vulnerabilities in software, applications, networks, operating systems, or hardware, typically…
- Watering hole attack Watering hole is a computer attack strategy in which an attacker guesses or observes which websites an organization's users frequent and then uses one…
- SQL injection In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into…
- File inclusion vulnerability A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time…