Web shell

A web shell is a script uploaded to the server that gives the attacker remote control: browsing and editing files, running commands, sending spam. It is one of the first tools an attacker installs after breaking through the defences.

Web shells are often disguised under innocent file names and hidden deep in directories, which makes them hard to find without a thorough review. Their presence means the site is fully compromised and needs urgent, comprehensive cleanup.