security-webshells
installsforks
How to install security-webshells?
eyadkelleh/awesome-skills-security/security-webshells
$npx -y skills add Eyadkelleh/awesome-skills-security --skill security-webshellsWeb shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
SKILL.md
| 1 | # SecLists Web-Shells |
| 2 | |
| 3 | ## Description |
| 4 | |
| 5 | Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing. |
| 6 | |
| 7 | **Source:** [SecLists/Web-Shells](https://github.com/danielmiessler/SecLists/tree/master/Web-Shells) |
| 8 | **Repository:** https://github.com/danielmiessler/SecLists |
| 9 | **License:** MIT |
| 10 | |
| 11 | ## When to Use This Skill |
| 12 | |
| 13 | Use this skill when you need: |
| 14 | - Web shell detection testing |
| 15 | - Security monitoring validation |
| 16 | - Malware analysis |
| 17 | - IDS/IPS signature testing |
| 18 | - Forensics research |
| 19 | |
| 20 | **⚠️ IMPORTANT:** Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes. |
| 21 | |
| 22 | ## Key Files in This Skill |
| 23 | |
| 24 | - `PHP shells - Common PHP web shells` |
| 25 | - `ASP/ASPX shells - Microsoft web shells` |
| 26 | - `JSP shells - Java server pages shells` |
| 27 | - `Python shells - Python-based shells` |
| 28 | - `Perl shells - Perl web shells` |
| 29 | |
| 30 | |
| 31 | ## Usage Example |
| 32 | |
| 33 | ```python |
| 34 | # Access files from this skill |
| 35 | import os |
| 36 | |
| 37 | # Example: Load patterns/payloads |
| 38 | skill_path = "references/Web-Shells" |
| 39 | |
| 40 | # List all available files |
| 41 | for root, dirs, files in os.walk(skill_path): |
| 42 | for file in files: |
| 43 | if file.endswith('.txt'): |
| 44 | filepath = os.path.join(root, file) |
| 45 | print(f"Found: {filepath}") |
| 46 | |
| 47 | # Read file content |
| 48 | with open(filepath, 'r', errors='ignore') as f: |
| 49 | content = f.read().splitlines() |
| 50 | print(f" Lines: {len(content)}") |
| 51 | ``` |
| 52 | |
| 53 | ## Security & Ethics |
| 54 | |
| 55 | ### Authorized Use Cases ✅ |
| 56 | - Authorized penetration testing with written permission |
| 57 | - Bug bounty programs (within scope) |
| 58 | - CTF competitions |
| 59 | - Security research in controlled environments |
| 60 | - Testing your own systems |
| 61 | - Educational demonstrations |
| 62 | |
| 63 | ### Prohibited Use Cases ❌ |
| 64 | - Unauthorized access attempts |
| 65 | - Testing without permission |
| 66 | - Malicious activities |
| 67 | - Privacy violations |
| 68 | - Any illegal activities |
| 69 | |
| 70 | ## Complete SecLists Collection |
| 71 | |
| 72 | This is a curated subset of SecLists. For the complete collection: |
| 73 | - **Full repository:** https://github.com/danielmiessler/SecLists |
| 74 | - **Size:** 4.5 GB with 6,000+ files |
| 75 | - **All categories:** Passwords, Usernames, Discovery, Fuzzing, Payloads, Web-Shells, Pattern-Matching, AI, Miscellaneous |
| 76 | |
| 77 | --- |
| 78 | |
| 79 | **Generated by Skill Seeker** | SecLists Web-Shells Collection |
| 80 | **License:** MIT - Use responsibly with proper authorization |
People who liked this also viewed
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API perSkillsJul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: SkillsJul 2026
- azure-rbacOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026
- better-auth-best-practicesAgent skill from better-auth/skillsSkillsJul 2026
- firebase-security-rules-auditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.SkillsJul 2026
- audit-websiteAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-opSkillsJul 2026
