SecLists Web-Shells
Description
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
Source: SecLists/Web-Shells
Repository: https://github.com/danielmiessler/SecLists
License: MIT
When to Use This Skill
Use this skill when you need:
- - Web shell detection testing
- Security monitoring validation
- Malware analysis
- IDS/IPS signature testing
- Forensics research
⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
Key Files in This Skill
- - INLINECODE0
- INLINECODE1
- INLINECODE2
- INLINECODE3
- INLINECODE4
Usage Example
CODEBLOCK0
Security & Ethics
Authorized Use Cases ✅
- - Authorized penetration testing with written permission
- Bug bounty programs (within scope)
- CTF competitions
- Security research in controlled environments
- Testing your own systems
- Educational demonstrations
Prohibited Use Cases ❌
- - Unauthorized access attempts
- Testing without permission
- Malicious activities
- Privacy violations
- Any illegal activities
Complete SecLists Collection
This is a curated subset of SecLists. For the complete collection:
- - Full repository: https://github.com/danielmiessler/SecLists
- Size: 4.5 GB with 6,000+ files
- All categories: Passwords, Usernames, Discovery, Fuzzing, Payloads, Web-Shells, Pattern-Matching, AI, Miscellaneous
Generated by Skill Seeker | SecLists Web-Shells Collection
License: MIT - Use responsibly with proper authorization
SecLists Web-Shells
描述
用于检测和分析的Web Shell样本:包括PHP、ASP、ASPX、JSP、Python、Perl等类型的Shell。适用于安全研究和检测系统测试。
来源: SecLists/Web-Shells
仓库: https://github.com/danielmiessler/SecLists
许可证: MIT
何时使用此技能
当您需要以下内容时,请使用此技能:
- - Web Shell检测测试
- 安全监控验证
- 恶意软件分析
- IDS/IPS签名测试
- 取证研究
⚠️ 重要提示: 仅用于授权的安全测试、漏洞赏金计划、CTF竞赛或教育目的。
此技能中的关键文件
- - PHP Shell - 常见的PHP Web Shell
- ASP/ASPX Shell - 微软Web Shell
- JSP Shell - Java服务器页面Shell
- Python Shell - 基于Python的Shell
- Perl Shell - Perl Web Shell
使用示例
python
从此技能访问文件
import os
示例:加载模式/载荷
skill_path = references/Web-Shells
列出所有可用文件
for root, dirs, files in os.walk(skill_path):
for file in files:
if file.endswith(.txt):
filepath = os.path.join(root, file)
print(f找到:{filepath})
# 读取文件内容
with open(filepath, r, errors=ignore) as f:
content = f.read().splitlines()
print(f 行数:{len(content)})
安全与伦理
授权使用场景 ✅
- - 获得书面授权的渗透测试
- 漏洞赏金计划(在范围内)
- CTF竞赛
- 在受控环境中的安全研究
- 测试自有系统
- 教育演示
禁止使用场景 ❌
- - 未经授权的访问尝试
- 未经许可的测试
- 恶意活动
- 侵犯隐私
- 任何非法活动
完整的SecLists集合
这是SecLists的精选子集。如需完整集合:
- - 完整仓库: https://github.com/danielmiessler/SecLists
- 大小: 4.5 GB,包含6,000+个文件
- 所有类别: 密码、用户名、发现、模糊测试、载荷、Web Shell、模式匹配、AI、杂项
由Skill Seeker生成 | SecLists Web-Shells集合
许可证: MIT - 请在获得适当授权后负责任地使用