Malware (malicious software), is a blanket term for viruses, worms, trojans, backdoors, spyware, shells as well as JavaScript code obfuscation, exploits, malicious iframes, malicious code injection, malicious code obfuscation, auto-generated malicious content, redirects, hidden eval code and other harmful computer software designed to cause damage, gain access to sensitive information and steal your traffic or computer resources. Below the table of malware currently detected by our scan system. Download it for free.
Total: 797 malware
A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | See All
| Name of Malware | Description | Author of the signature for Detection | Signature and Condition |
|---|---|---|---|
| w3d_php_php | Semi-Auto-generated - file w3d.php.php.txt | Neo23x0 Yara BRG + customization by Stefan -dfate- Molls | Open |
| warfiles_cmd | Laudanum Injector Tools - file cmd.jsp | Florian Roth | Open |
| webadmin | Webshells Auto-generated - file webadmin.php | Yara Bulk Rule Generator by Florian Roth | Open |
| webshell | Webshells Auto-generated - file webshell.php | Yara Bulk Rule Generator by Florian Roth | Open |
| webshell_000_403_807_a_c5_config_css_dm_he1p_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_xxx | Web Shell - from files 000.jsp, 403.jsp, 807.jsp, a.jsp, c5.jsp, config.jsp, css.jsp, dm.jsp, he1p.jsp, JspSpy.jsp, JspSpyJDK5.jsp, JspSpyJDK51.jsp, luci.jsp.spy2009.jsp, m.jsp, ma3.jsp, mmym520.jsp, myxx.jsp, nogfw.jsp, ok.jsp, queryDong.jsp, spyjsp2010.jsp, style.jsp, t00ls.jsp, u.jsp, xia.jsp, zend.jsp, cofigrue.jsp, 1.jsp, jspspy.jsp, jspspy_k8.jsp, JspSpy.jsp, JspSpyJDK5.jsp | Florian Roth | Open |
| webshell_000_403_807_a_c5_config_css_dm_he1p_xxx | Web Shell - from files 000.jsp, 403.jsp, 807.jsp, a.jsp, c5.jsp, config.jsp, css.jsp, dm.jsp, he1p.jsp, JspSpy.jsp, JspSpyJDK5.jsp, JspSpyJDK51.jsp, luci.jsp.spy2009.jsp, m.jsp, ma3.jsp, mmym520.jsp, myxx.jsp, nogfw.jsp, ok.jsp, queryDong.jsp, spyjsp2010.jsp, style.jsp, u.jsp, xia.jsp, zend.jsp, cofigrue.jsp, 1.jsp, jspspy.jsp, jspspy_k8.jsp, JspSpy.jsp, JspSpyJDK5.jsp | Florian Roth | Open |
| webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend | Web Shell - from files 000.jsp, 403.jsp, c5.jsp, config.jsp, myxx.jsp, queryDong.jsp, spyjsp2010.jsp, zend.jsp | Florian Roth | Open |
| webshell_000_403_c5_queryDong_spyjsp2010 | Web Shell - from files 000.jsp, 403.jsp, c5.jsp, queryDong.jsp, spyjsp2010.jsp | Florian Roth | Open |
| webshell_000_403_c5_queryDong_spyjsp2010_t00ls | Web Shell - from files 000.jsp, 403.jsp, c5.jsp, queryDong.jsp, spyjsp2010.jsp, t00ls.jsp | Florian Roth | Open |
| webshell_2008_2009lite_2009mssql | Web Shell - from files 2008.php, 2009lite.php, 2009mssql.php | Florian Roth | Open |
| webshell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz | Web Shell - from files 2008.php, 2009mssql.php, phpspy_2005_full.php, phpspy_2006.php, arabicspy.php, hkrkoz.php | Florian Roth | Open |
| webshell_201_3_ma_download | Web Shell - from files 201.jsp, 3.jsp, ma.jsp, download.jsp | Florian Roth | Open |
| Webshell_27_9_acid_c99_locus7s | Detects Webshell - rule generated from from files 27.9.txt, acid.php, c99_locus7s.txt | Florian Roth | Open |
| Webshell_27_9_c66_c99 | Detects Webshell - rule generated from from files 27.9.txt, c66.php, c99-shadows-mod.php, c99.php ... | Florian Roth | Open |
| webshell_2_520_icesword_job_ma1 | Web Shell - from files 2.jsp, 520.jsp, icesword.jsp, job.jsp, ma1.jsp | Florian Roth | Open |
| webshell_2_520_icesword_job_ma1_ma4_2 | Web Shell - from files 2.jsp, 520.jsp, icesword.jsp, job.jsp, ma1.jsp, ma4.jsp, 2.jsp | Florian Roth | Open |
| webshell_2_520_job_JspWebshell_1_2_ma1_ma4_2 | Web Shell - from files 2.jsp, 520.jsp, job.jsp, JspWebshell 1.2.jsp, ma1.jsp, ma4.jsp, 2.jsp | Florian Roth | Open |
| webshell_2_520_job_ma1_ma4_2 | Web Shell - from files 2.jsp, 520.jsp, job.jsp, ma1.jsp, ma4.jsp, 2.jsp | Florian Roth | Open |
| webshell_400_in_JFolder_jfolder01_jsp_leo_warn_webshell_nc | Web Shell - from files 400.jsp, in.jsp, JFolder.jsp, jfolder01.jsp, jsp.jsp, leo.jsp, warn.jsp, webshell-nc.jsp | Florian Roth | Open |
| webshell_404_data_in_JFolder_jfolder01_jsp_suiyue_warn | Web Shell - from files 404.jsp, data.jsp, in.jsp, JFolder.jsp, jfolder01.jsp, jsp.jsp, suiyue.jsp, warn.jsp | Florian Roth | Open |
| webshell_404_data_in_JFolder_jfolder01_xxx | Web Shell - from files 404.jsp, data.jsp, in.jsp, JFolder.jsp, jfolder01.jsp, jsp.jsp, leo.jsp, suiyue.jsp, warn.jsp | Florian Roth | Open |
| webshell_404_data_suiyue | Web Shell - from files 404.jsp, data.jsp, suiyue.jsp | Florian Roth | Open |
| webshell_807_a_css_dm_he1p_JspSpy_xxx | Web Shell - from files 807.jsp, a.jsp, css.jsp, dm.jsp, he1p.jsp, JspSpy.jsp, JspSpyJDK5.jsp, JspSpyJDK51.jsp, luci.jsp.spy2009.jsp, m.jsp, ma3.jsp, mmym520.jsp, nogfw.jsp, ok.jsp, style.jsp, u.jsp, xia.jsp, cofigrue.jsp, 1.jsp, jspspy.jsp, jspspy_k8.jsp, JspSpy.jsp, JspSpyJDK5.jsp | Florian Roth | Open |
| webshell_807_dm_JspSpyJDK5_m_cofigrue | Web Shell - from files 807.jsp, dm.jsp, JspSpyJDK5.jsp, m.jsp, cofigrue.jsp | Florian Roth | Open |
| WebShell_accept_language | PHP Webshells Github Archive - file accept_language.php | Florian Roth | Open |
| Webshell_AcidPoison | Detects Poison Sh3ll - Webshell | Florian Roth | Open |
| Webshell_acid_AntiSecShell_3 | Detects Webshell Acid | Florian Roth | Open |
| Webshell_acid_FaTaLisTiCz_Fx_fx_p0isoN_sh3ll_x0rg_byp4ss_256 | Detects Webshell - rule generated from from files acid.php, FaTaLisTiCz_Fx.txt, fx.txt, p0isoN.sh3ll.txt, x0rg.byp4ss.txt | Florian Roth | Open |
| WebShell_AK_74_Security_Team_Web_Shell_Beta_Version | PHP Webshells Github Archive - file AK-74 Security Team Web Shell Beta Version.php | Florian Roth | Open |
| Webshell_and_Exploit_CN_APT_HK | Webshell and Exploit Code in relation with APT against Honk Kong protesters | Florian Roth | Open |
| webshell_Ani_Shell | Web Shell - file Ani-Shell.php | Florian Roth | Open |
| webshell_Antichat_Shell_v1_3_2 | Web Shell - file Antichat Shell v1.3.php | Florian Roth | Open |
| WebShell_Ayyildiz_Tim___AYT__Shell_v_2_1_Biz | PHP Webshells Github Archive - file Ayyildiz Tim -AYT- Shell v 2.1 Biz.php | Florian Roth | Open |
| webshell_aZRaiLPhp_v1_0 | Web Shell - file aZRaiLPhp v1.0.php | Florian Roth | Open |
| webshell_B374kPHP_B374k | Web Shell - file B374k.php | Florian Roth | Open |
| WebShell_b374k_mini_shell_php_php | PHP Webshells Github Archive - file b374k-mini-shell-php.php.php | Florian Roth | Open |
| WebShell_b374k_php | PHP Webshells Github Archive - file b374k.php.php | Florian Roth | Open |
| Webshell_Backdoor_PHP_Agent_r57_mod_bizzz_shell_r57 | Detects Webshell - rule generated from from files Backdoor.PHP.Agent.php, r57.mod-bizzz.shell.txt ... | Florian Roth | Open |
| WebShell_backupsql | PHP Webshells Github Archive - file backupsql.php | Florian Roth | Open |
| webshell_browser_201_3_400_in_JFolder_jfolder01_jsp_leo_ma_warn_webshell_nc_download | Web Shell - from files browser.jsp, 201.jsp, 3.jsp, 400.jsp, in.jsp, JFolder.jsp, jfolder01.jsp, jsp.jsp, leo.jsp, ma.jsp, warn.jsp, webshell-nc.jsp, download.jsp | Florian Roth | Open |
| webshell_browser_201_3_ma_download | Web Shell - from files browser.jsp, 201.jsp, 3.jsp, ma.jsp, download.jsp | Florian Roth | Open |
| webshell_browser_201_3_ma_ma2_download | Web Shell - from files browser.jsp, 201.jsp, 3.jsp, ma.jsp, ma2.jsp, download.jsp | Florian Roth | Open |
| webshell_bypass_iisuser_p | Web shells - generated from file bypass-iisuser-p.asp | Florian Roth | Open |
| Webshell_c100 | Detects Webshell - rule generated from from files c100 v. 777shell | Florian Roth | Open |
| webshell_C99madShell_v_3_0_smowu | Web Shell - file smowu.php | Florian Roth | Open |
| WebShell_C99madShell_v__2_0_madnet_edition | PHP Webshells Github Archive - file C99madShell v. 2.0 madnet edition.php | Florian Roth | Open |
| Webshell_c99_4 | Detects C99 Webshell | Florian Roth | Open |
| webshell_c99_c66_c99_shadows_mod_c99shell | Web Shell - from files c99.php, c66.php, c99-shadows-mod.php, c99shell.php | Florian Roth | Open |
| webshell_c99_c99shell_c99_c99shell | Web Shell - from files c99.php, c99shell.php, c99.php, c99shell.php | Florian Roth | Open |
| webshell_c99_c99shell_c99_w4cking_Shell_xxx | Web Shell - from files c99.php, c99shell.php, c99_w4cking.php, Shell [ci] .Biz was here.php, acid.php, c100 v. 777shell v. Undetectable #18a Modded by 777 - Don.php, c66.php, c99-shadows-mod.php, c99.php, c99shell.php | Florian Roth | Open |
| WebShell_c99_locus7s | PHP Webshells Github Archive - file c99_locus7s.php | Florian Roth | Open |
| webshell_c99_locus7s_c99_w4cking_xxx | Web Shell - from files c99_locus7s.php, c99_w4cking.php, r57shell.php, r57shell127.php, SnIpEr_SA Shell.php, EgY_SpIdEr ShElL V2.php, r57_iFX.php, r57_kartal.php, r57_Mohajer22.php, r57.php, acid.php, newsh.php, r57.php, Backdoor.PHP.Agent.php | Florian Roth | Open |
| WebShell_c99_madnet | PHP Webshells Github Archive - file c99_madnet.php | Florian Roth | Open |
| webshell_c99_madnet_smowu | Web Shell - file smowu.php | Florian Roth | Open |
| webshell_c99_Shell_ci_Biz_was_here_c100_v_xxx | Web Shell - from files c99.php, Shell [ci] .Biz was here.php, c100 v. 777shell v. Undetectable #18a Modded by 777 - Don.php, c66.php, c99-shadows-mod.php, c99shell.php | Florian Roth | Open |
| webshell_caidao_shell_404 | Web Shell - file 404.php | Florian Roth | Open |
| webshell_caidao_shell_guo | Web Shell - file guo.php | Florian Roth | Open |
| webshell_caidao_shell_hkmjj | Web Shell - file hkmjj.asp | Florian Roth | Open |
| webshell_caidao_shell_ice | Web Shell - file ice.asp | Florian Roth | Open |
| webshell_caidao_shell_ice_2 | Web Shell - file ice.php | Florian Roth | Open |
| webshell_caidao_shell_mdb | Web Shell - file mdb.asp | Florian Roth | Open |
| WebShell_CasuS_1_5 | PHP Webshells Github Archive - file CasuS 1.5.php | Florian Roth | Open |
| WebShell_cgi | Semi-Auto-generated - file WebShell.cgi.txt | Neo23x0 Yara BRG + customization by Stefan -dfate- Molls | Open |
| WebShell_cgitelnet | PHP Webshells Github Archive - file cgitelnet.php | Florian Roth | Open |
| webshell_cihshell_fix | Web Shell - file cihshell_fix.php | Florian Roth | Open |
| webshell_cmd_win32 | Web Shell - file cmd_win32.jsp | Florian Roth | Open |
| webshell_config_myxx_zend | Web Shell - from files config.jsp, myxx.jsp, zend.jsp | Florian Roth | Open |
| webshell_cpg_143_incl_xpl | Web Shell - file cpg_143_incl_xpl.php | Florian Roth | Open |
| webshell_Crystal_Crystal | Web Shell - file Crystal.php | Florian Roth | Open |
| webshell_customize | Web Shell - file customize.jsp | Florian Roth | Open |
| WebShell_dC3_Security_Crew_Shell_PRiV | PHP Webshells Github Archive - file dC3_Security_Crew_Shell_PRiV.php | Florian Roth | Open |
| WebShell_dC3_Security_Crew_Shell_PRiV_2 | PHP Webshells Github Archive - file dC3 Security Crew Shell PRiV.php | Florian Roth | Open |
| webshell_dev_core | Web shells - generated from file dev_core.php | Florian Roth | Open |
| webshell_Dive_Shell_1_0_Emperor_Hacking_Team_xxx | Web Shell - from files Dive Shell 1.0 - Emperor Hacking Team.php, phpshell.php, SimShell 1.0 - Simorgh Security MGZ.php | Florian Roth | Open |
| webshell_drag_system | Web Shell - file system.jsp | Florian Roth | Open |
| WebShell_DTool_Pro | PHP Webshells Github Archive - file DTool Pro.php | Florian Roth | Open |
| webshell_Dx_Dx | Web Shell - file Dx.php | Florian Roth | Open |
| webshell_elmaliseker_2 | Web Shell - file elmaliseker.asp | Florian Roth | Open |
| webshell_ELMALISEKER_Backd00r | Web Shell - file ELMALISEKER Backd00r.asp | Florian Roth | Open |
| WebShell_ftpsearch | PHP Webshells Github Archive - file ftpsearch.php | Florian Roth | Open |
| webshell_functions | rules for basic webshell functions | @tenacioustek | Open |
| WebShell_g00nshell_v1_3 | PHP Webshells Github Archive - file g00nshell-v1.3.php | Florian Roth | Open |
| WebShell_Gamma_Web_Shell | PHP Webshells Github Archive - file Gamma Web Shell.php | Florian Roth | Open |
| WebShell_Generic_PHP_1 | PHP Webshells Github Archive - from files Dive Shell 1.0 - Emperor Hacking Team.php, Dive_Shell_1.0_Emperor_Hacking_Team.php, SimShell 1.0 - Simorgh Security MGZ.php, SimShell_1.0_-_Simorgh_Security_MGZ.php | Florian Roth | Open |
| WebShell_Generic_PHP_10 | PHP Webshells Github Archive - from files Cyber Shell.php, cybershell.php, Cyber Shell (v 1.0).php, PHPRemoteView.php | Florian Roth | Open |
| WebShell_Generic_PHP_11 | PHP Webshells Github Archive - from files rootshell.php, Rootshell.v.1.0.php, s72 Shell v1.1 Coding.php, s72_Shell_v1.1_Coding.php | Florian Roth | Open |
| WebShell_Generic_PHP_2 | PHP Webshells Github Archive - from files CrystalShell v.1.php, load_shell.php, Loaderz WEB Shell.php, stres.php | Florian Roth | Open |
| WebShell_Generic_PHP_3 | PHP Webshells Github Archive - from files Antichat Shell v1.3.php, Antichat Shell. Modified by Go0o$E.php, Antichat Shell.php, fatal.php | Florian Roth | Open |
| WebShell_Generic_PHP_4 | PHP Webshells Github Archive - from files CrystalShell v.1.php, load_shell.php, nshell.php, Loaderz WEB Shell.php, stres.php | Florian Roth | Open |
| WebShell_Generic_PHP_5 | PHP Webshells Github Archive - from files ex0shell.php, megabor.php, GRP WebShell 2.0 release build 2018 (C)2006,Great.php | Florian Roth | Open |
| WebShell_Generic_PHP_6 | PHP Webshells Github Archive - from files c0derz shell [csh] v. 0.1.1 release.php, CrystalShell v.1.php, load_shell.php, Loaderz WEB Shell.php, stres.php | Florian Roth | Open |
| WebShell_Generic_PHP_7 | PHP Webshells Github Archive - from files Mysql interface v1.0.php, MySQL Web Interface Version 0.8.php, Mysql_interface_v1.0.php, MySQL_Web_Interface_Version_0.8.php | Florian Roth | Open |
| WebShell_Generic_PHP_9 | PHP Webshells Github Archive - from files KAdot Universal Shell v0.1.6.php, KAdot_Universal_Shell_v0.1.6.php, KA_uShell 0.1.6.php | Florian Roth | Open |
| webshell_GetPostpHp | Web shells - generated from file GetPostpHp.php | Florian Roth | Open |
| WebShell_GFS | PHP Webshells Github Archive - from files GFS web-shell ver 3.1.7 - PRiV8.php, Predator.php, GFS_web-shell_ver_3.1.7_-_PRiV8.php | Florian Roth | Open |
| webshell_gfs_sh_r57shell_r57shell127_SnIpEr_SA_xxx | Web Shell - from files gfs_sh.php, r57shell.php, r57shell127.php, SnIpEr_SA Shell.php, EgY_SpIdEr ShElL V2.php, r57_iFX.php, r57_kartal.php, r57_Mohajer22.php, r57.php, r57.php, Backdoor.PHP.Agent.php | Florian Roth | Open |
| webshell_ghost_source_icesword_silic | Web Shell - from files ghost_source.php, icesword.php, silic.php | Florian Roth | Open |
| WebShell_go_shell | PHP Webshells Github Archive - file go-shell.php | Florian Roth | Open |
| webshell_h4ntu_shell_powered_by_tsoi_ | Web Shell - file h4ntu shell [powered by tsoi].php | Florian Roth | Open |
| WebShell_h4ntu_shell__powered_by_tsoi_ | PHP Webshells Github Archive - file h4ntu shell [powered by tsoi].php | Florian Roth | Open |
| webshell_he1p_JspSpy_nogfw_ok_style_1_JspSpy1 | Web Shell - from files he1p.jsp, JspSpy.jsp, nogfw.jsp, ok.jsp, style.jsp, 1.jsp, JspSpy.jsp | Florian Roth | Open |
| WebShell_hiddens_shell_v1 | PHP Webshells Github Archive - file hiddens shell v1.php | Florian Roth | Open |
| webshell_iMHaPFtp_2 | Web Shell - file iMHaPFtp.php | Florian Roth | Open |
| webshell_Inderxer | Web Shell - file Inderxer.asp | Florian Roth | Open |
| Webshell_Insomnia | Insomnia Webshell - file InsomniaShell.aspx | Florian Roth | Open |
| webshell_in_JFolder_jfolder01_jsp_leo_warn | Web Shell - from files in.jsp, JFolder.jsp, jfolder01.jsp, jsp.jsp, leo.jsp, warn.jsp | Florian Roth | Open |
| webshell_ironshell | Web Shell - file ironshell.php | Florian Roth | Open |
| webshell_itsec_itsecteam_shell_jHn | Web Shell - from files itsec.php, itsecteam_shell.php, jHn.php | Florian Roth | Open |
| webshell_itsec_PHPJackal_itsecteam_shell_jHn | Web Shell - from files itsec.php, PHPJackal.php, itsecteam_shell.php, jHn.php | Florian Roth | Open |
| webshell_Java_Shell | Web Shell - file Java Shell.jsp | Florian Roth | Open |
| webshell_jspShell | Web Shell - file jspShell.jsp | Florian Roth | Open |
| webshell_Jspspyweb | Web Shell - file Jspspyweb.jsp | Florian Roth | Open |
| webshell_JspSpy_JspSpyJDK5_JspSpyJDK51_luci_jsp_spy2009_m_ma3_xxx | Web Shell - from files 000.jsp, 403.jsp, 807.jsp, a.jsp, c5.jsp, css.jsp, dm.jsp, he1p.jsp, JspSpy.jsp, JspSpyJDK5.jsp, JspSpyJDK51.jsp, luci.jsp.spy2009.jsp, m.jsp, ma3.jsp, mmym520.jsp, nogfw.jsp, ok.jsp, queryDong.jsp, spyjsp2010.jsp, style.jsp, t00ls.jsp, u.jsp, xia.jsp, cofigrue.jsp, 1.jsp, jspspy.jsp, jspspy_k8.jsp, JspSpy.jsp, JspSpyJDK5.jsp | Florian Roth | Open |
| WebShell_JspWebshell_1_2 | PHP Webshells Github Archive - file JspWebshell_1.2.php | Florian Roth | Open |
| WebShell_JspWebshell_1_2_2 | PHP Webshells Github Archive - file JspWebshell 1.2.php | Florian Roth | Open |
| webshell_jsp_123 | Web Shell - file 123.jsp | Florian Roth | Open |
| webshell_jsp_12302 | Web Shell - file 12302.jsp | Florian Roth | Open |
| webshell_jsp_action | Web Shell - file action.jsp | Florian Roth | Open |
| webshell_jsp_asd | Web Shell - file asd.jsp | Florian Roth | Open |
| webshell_jsp_cmd | Web Shell - file cmd.jsp | Florian Roth | Open |
| webshell_jsp_cmdjsp | Web Shell - file cmdjsp.jsp | Florian Roth | Open |
| webshell_jsp_cmdjsp_2 | Web Shell - file cmdjsp.jsp | Florian Roth | Open |
| webshell_jsp_guige | Web Shell - file guige.jsp | Florian Roth | Open |
| webshell_jsp_guige02 | Web Shell - file guige02.jsp | Florian Roth | Open |
| webshell_jsp_hsxa | Web Shell - file hsxa.jsp | Florian Roth | Open |
| webshell_jsp_hsxa1 | Web Shell - file hsxa1.jsp | Florian Roth | Open |
| webshell_jsp_inback3 | Web Shell - file inback3.jsp | Florian Roth | Open |
| webshell_jsp_IXRbE | Web Shell - file IXRbE.jsp | Florian Roth | Open |
| webshell_jsp_jdbc | Web Shell - file jdbc.jsp | Florian Roth | Open |
| webshell_jsp_jshell | Web Shell - file jshell.jsp | Florian Roth | Open |
| webshell_jsp_k81 | Web Shell - file k81.jsp | Florian Roth | Open |
| webshell_jsp_k8cmd | Web Shell - file k8cmd.jsp | Florian Roth | Open |
| webshell_jsp_list | Web Shell - file list.jsp | Florian Roth | Open |
| webshell_jsp_list1 | Web Shell - file list1.jsp | Florian Roth | Open |
| webshell_jsp_reverse_jsp_reverse_jspbd | Web Shell - from files jsp-reverse.jsp, jsp-reverse.jsp, jspbd.jsp | Florian Roth | Open |
| webshell_jsp_sys3 | Web Shell - file sys3.jsp | Florian Roth | Open |
| webshell_jsp_tree | Web Shell - file tree.jsp | Florian Roth | Open |
| webshell_jsp_up | Web Shell - file up.jsp | Florian Roth | Open |
| webshell_jsp_utils | Web Shell - file utils.jsp | Florian Roth | Open |
| webshell_jsp_web | Web Shell - file web.jsp | Florian Roth | Open |
| webshell_jsp_zx | Web Shell - file zx.jsp | Florian Roth | Open |
| WebShell_lamashell | PHP Webshells Github Archive - file lamashell.php | Florian Roth | Open |
| webshell_Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit | Web Shell - file Liz0ziM Private Safe Mode Command Execuriton Bypass Exploit.php | Florian Roth | Open |
| webshell_metaslsoft | Web Shell - file metaslsoft.php | Florian Roth | Open |
| webshell_minupload | Web Shell - file minupload.jsp | Florian Roth | Open |
| WebShell_Moroccan_Spamers_Ma_EditioN_By_GhOsT | PHP Webshells Github Archive - file Moroccan Spamers Ma-EditioN By GhOsT.php | Florian Roth | Open |
| webshell_mysqlwebsh | Web Shell - file mysqlwebsh.php | Florian Roth | Open |
| webshell_Mysql_interface_v1_0 | Web Shell - file Mysql interface v1.0.php | Florian Roth | Open |
| WebShell_mysql_tool | PHP Webshells Github Archive - file mysql_tool.php | Florian Roth | Open |
| webshell_MySQL_Web_Interface_Version_0_8 | Web Shell - file MySQL Web Interface Version 0.8.php | Florian Roth | Open |
| WebShell_NCC_Shell | PHP Webshells Github Archive - file NCC-Shell.php | Florian Roth | Open |
| webshell_NetworkFileManagerPHP | Web Shell - file NetworkFileManagerPHP.php | Florian Roth | Open |
| webshell_NIX_REMOTE_WEB_SHELL_NIX_REMOTE_WEB_xxx1 | Web Shell - from files NIX REMOTE WEB-SHELL.php, NIX REMOTE WEB-SHELL v.0.5 alpha Lite Public Version.php, KAdot Universal Shell v0.1.6.php | Florian Roth | Open |
| webshell_NIX_REMOTE_WEB_SHELL_nstview_xxx | Web Shell - from files NIX REMOTE WEB-SHELL.php, nstview.php, NIX REMOTE WEB-SHELL v.0.5 alpha Lite Public Version.php, Cyber Shell (v 1.0).php | Florian Roth | Open |
| WebShell_NTDaddy_v1_9 | PHP Webshells Github Archive - file NTDaddy v1.9.php | Florian Roth | Open |
| WebShell_PHANTASMA | PHP Webshells Github Archive - file PHANTASMA.php | Florian Roth | Open |
| webshell_php | Semi-Auto-generated - file webshell.php.txt | Neo23x0 Yara BRG + customization by Stefan -dfate- Molls | Open |
| webshell_PHPJackal_v1_5 | Web Shell - file PHPJackal v1.5.php | Florian Roth | Open |
| webshell_phpkit_0_1a_odd | Web Shell - file odd.php | Florian Roth | Open |
| webshell_phpkit_1_0_odd | Web Shell - file odd.php | Florian Roth | Open |
| webshell_PHPRemoteView | Web Shell - file PHPRemoteView.php | Florian Roth | Open |
| webshell_phpshell3 | Web Shell - file phpshell3.php | Florian Roth | Open |
| webshell_phpshell_2_1_config | Web Shell - file config.php | Florian Roth | Open |
| webshell_phpshell_2_1_pwhash | Web Shell - file pwhash.php | Florian Roth | Open |
| webshell_phpspy2010 | Web Shell - file phpspy2010.php | Florian Roth | Open |
| webshell_phpspy_2005_full_phpspy_2005_lite_PHPSPY | Web Shell - from files phpspy_2005_full.php, phpspy_2005_lite.php, PHPSPY.php | Florian Roth | Open |
| webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_PHPSPY | Web Shell - from files phpspy_2005_full.php, phpspy_2005_lite.php, phpspy_2006.php, PHPSPY.php | Florian Roth | Open |
| WebShell_PhpSpy_Ver_2006 | PHP Webshells Github Archive - file PhpSpy Ver 2006.php | Florian Roth | Open |
| webshell_PHP_150 | Web Shell - file 150.php | Florian Roth | Open |
| webshell_php_2 | Web Shell - file 2.php | Florian Roth | Open |
| webshell_php_404 | Web Shell - file 404.php | Florian Roth | Open |
| webshell_PHP_a | Web Shell - file a.php | Florian Roth | Open |
| webshell_PHP_b37 | Web Shell - file b37.php | Florian Roth | Open |
| webshell_php_backdoor | Web Shell - file php-backdoor.php | Florian Roth | Open |
| webshell_PHP_bug_1_ | Web Shell - file bug (1).php | Florian Roth | Open |
| webshell_PHP_c37 | Web Shell - file c37.php | Florian Roth | Open |
| webshell_php_cmd | Web Shell - file cmd.php | Florian Roth | Open |
| webshell_PHP_co | Web Shell - file co.php | Florian Roth | Open |
| webshell_php_dodo_zip | Web Shell - file zip.php | Florian Roth | Open |
| webshell_php_fbi | Web Shell - file fbi.php | Florian Roth | Open |
| webshell_PHP_g00nv13 | Web Shell - file g00nv13.php | Florian Roth | Open |
| webshell_PHP_G5 | Web Shell - file G5.php | Florian Roth | Open |
| webshell_php_ghost | Web Shell - file ghost.php | Florian Roth | Open |
| webshell_php_h6ss | Web Shell - file h6ss.php | Florian Roth | Open |
| WebShell_php_include_w_shell | PHP Webshells Github Archive - file php-include-w-shell.php | Florian Roth | Open |
| webshell_php_list | Web Shell - file list.php | Florian Roth | Open |
| webshell_php_moon | Web Shell - file moon.php | Florian Roth | Open |
| webshell_PHP_r57142 | Web Shell - file r57142.php | Florian Roth | Open |
| webshell_PHP_redcod | Web Shell - file redcod.php | Florian Roth | Open |
| webshell_PHP_Shell_x3 | Web Shell - file PHP Shell.php | Florian Roth | Open |
| webshell_php_sh_server | Web Shell - file server.php | Florian Roth | Open |
| webshell_PHP_sql | Web Shell - file sql.php | Florian Roth | Open |
| webshell_php_s_u | Web Shell - file s-u.php | Florian Roth | Open |
| webshell_php_up | Web Shell - file up.php | Florian Roth | Open |
| WebShell_php_webshells_529 | PHP Webshells Github Archive - file 529.php | Florian Roth | Open |
| WebShell_php_webshells_cpanel | PHP Webshells Github Archive - file cpanel.php | Florian Roth | Open |
| WebShell_php_webshells_cw | PHP Webshells Github Archive - file cw.php | Florian Roth | Open |
| WebShell_php_webshells_kral | PHP Webshells Github Archive - file kral.php | Florian Roth | Open |
| WebShell_php_webshells_lolipop | PHP Webshells Github Archive - file lolipop.php | Florian Roth | Open |
| WebShell_php_webshells_lostDC | PHP Webshells Github Archive - file lostDC.php | Florian Roth | Open |
| WebShell_php_webshells_matamu | PHP Webshells Github Archive - file matamu.php | Florian Roth | Open |
| WebShell_php_webshells_MyShell | PHP Webshells Github Archive - file MyShell.php | Florian Roth | Open |
| WebShell_php_webshells_NGH | PHP Webshells Github Archive - file NGH.php | Florian Roth | Open |
| WebShell_php_webshells_pHpINJ | PHP Webshells Github Archive - file pHpINJ.php | Florian Roth | Open |
| WebShell_php_webshells_pws | PHP Webshells Github Archive - file pws.php | Florian Roth | Open |
| WebShell_php_webshells_README | PHP Webshells Github Archive - file README.md | Florian Roth | Open |
| WebShell_php_webshells_spygrup | PHP Webshells Github Archive - file spygrup.php | Florian Roth | Open |
| WebShell_php_webshells_tryag | PHP Webshells Github Archive - file tryag.php | Florian Roth | Open |
| webshell_PH_Vayv_PH_Vayv | Web Shell - file PH Vayv.php | Florian Roth | Open |
| webshell_Private_i3lue | Web Shell - file Private-i3lue.php | Florian Roth | Open |
| WebShell_qsd_php_backdoor | PHP Webshells Github Archive - file qsd-php-backdoor.php | Florian Roth | Open |
| webshell_r57shell127_r57_iFX_r57_kartal_r57_antichat | Web Shell - from files r57shell127.php, r57_iFX.php, r57_kartal.php, r57.php, antichat.php | Florian Roth | Open |
| webshell_r57shell127_r57_kartal_r57 | Web Shell - from files r57shell127.php, r57_kartal.php, r57.php | Florian Roth | Open |
| Webshell_r57shell_2 | Detects Webshell R57 | Florian Roth | Open |
| webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx | Web Shell - from files r57shell.php, r57shell127.php, SnIpEr_SA Shell.php, EgY_SpIdEr ShElL V2.php, r57_iFX.php, r57_kartal.php, r57_Mohajer22.php, r57.php, r57.php, Backdoor.PHP.Agent.php | Florian Roth | Open |
| webshell_r57_1_4_0 | Web Shell - file r57.1.4.0.php | Florian Roth | Open |
| webshell_redirect | Web Shell - file redirect.asp | Florian Roth | Open |
| webshell_remview_fix | Web Shell - file remview_fix.php | Florian Roth | Open |
| WebShell_ru24_post_sh | PHP Webshells Github Archive - file ru24_post_sh.php | Florian Roth | Open |
| webshell_s72_Shell_v1_1_Coding | Web Shell - file s72 Shell v1.1 Coding.php | Florian Roth | Open |
| WebShell_safe0ver | PHP Webshells Github Archive - file safe0ver.php | Florian Roth | Open |
| webshell_Safe_mode_breaker | Web Shell - file Safe mode breaker.php | Florian Roth | Open |
| webshell_Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2 | Web Shell - file Safe_Mode Bypass PHP 4.4.2 and PHP 5.1.2.php | Florian Roth | Open |
| WebShell_Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2_2 | PHP Webshells Github Archive - file Safe_Mode Bypass PHP 4.4.2 and PHP 5.1.2.php | Florian Roth | Open |
| webshell_Server_Variables | Web Shell - file Server Variables.asp | Florian Roth | Open |
| webshell_shell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz | Web Shell - from files shell.php, 2008.php, 2009mssql.php, phpspy_2005_full.php, phpspy_2006.php, arabicspy.php, hkrkoz.php | Florian Roth | Open |
| webshell_Shell_ci_Biz_was_here_c100_v_xxx | Web Shell - from files Shell [ci] .Biz was here.php, c100 v. 777shell v. Undetectable #18a Modded by 777 - Don.php, c99-shadows-mod.php | Florian Roth | Open |
| webshell_shell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_arabicspy_PHPSPY_hkrkoz | Web Shell - from files shell.php, phpspy_2005_full.php, phpspy_2005_lite.php, phpspy_2006.php, arabicspy.php, PHPSPY.php, hkrkoz.php | Florian Roth | Open |
| webshell_shell_phpspy_2006_arabicspy | Web Shell - from files shell.php, phpspy_2006.php, arabicspy.php | Florian Roth | Open |
| webshell_shell_phpspy_2006_arabicspy_hkrkoz | Web Shell - from files shell.php, phpspy_2006.php, arabicspy.php, hkrkoz.php | Florian Roth | Open |
| webshell_sig_404super | Web shells - generated from file 404super.php | Florian Roth | Open |
| WebShell_simattacker | PHP Webshells Github Archive - file simattacker.php | Florian Roth | Open |
| webshell_SimAttacker_Vrsion_1_0_0_priv8_4_My_friend | Web Shell - file SimAttacker - Vrsion 1.0.0 - priv8 4 My friend.php | Florian Roth | Open |
| WebShell_SimAttacker___Vrsion_1_0_0___priv8_4_My_friend | PHP Webshells Github Archive - file SimAttacker - Vrsion 1.0.0 - priv8 4 My friend.php | Florian Roth | Open |
| webshell_simple_backdoor | Web Shell - file simple-backdoor.php | Florian Roth | Open |
| WebShell_simple_cmd | PHP Webshells Github Archive - file simple_cmd.php | Florian Roth | Open |
| WebShell_Simple_PHP_backdoor_by_DK | PHP Webshells Github Archive - file Simple_PHP_backdoor_by_DK.php | Florian Roth | Open |
| WebShell_Sincap_1_0 | PHP Webshells Github Archive - file Sincap 1.0.php | Florian Roth | Open |
| webshell_spjspshell | Web Shell - file spjspshell.jsp | Florian Roth | Open |
| webshell_Sst_Sheller | Web Shell - file Sst-Sheller.php | Florian Roth | Open |
| WebShell_STNC_WebShell_v0_8 | PHP Webshells Github Archive - file STNC WebShell v0.8.php | Florian Roth | Open |
| WebShell_Uploader | PHP Webshells Github Archive - file Uploader.php | Florian Roth | Open |
| webshell_webshells_new_aaa | Web shells - generated from file aaa.asp | Florian Roth | Open |
| webshell_webshells_new_code | Web shells - generated from file code.php | Florian Roth | Open |
| webshell_webshells_new_con2 | Web shells - generated from file con2.asp | Florian Roth | Open |
| webshell_webshells_new_JJJsp2 | Web shells - generated from file JJJsp2.jsp | Florian Roth | Open |
| webshell_webshells_new_JJjsp3 | Web shells - generated from file JJjsp3.jsp | Florian Roth | Open |
| webshell_webshells_new_JSP | Web shells - generated from file JSP.jsp | Florian Roth | Open |
| webshell_webshells_new_jspyyy | Web shells - generated from file jspyyy.jsp | Florian Roth | Open |
| webshell_webshells_new_make2 | Web shells - generated from file make2.php | Florian Roth | Open |
| webshell_webshells_new_pHp | Web shells - generated from file pHp.php | Florian Roth | Open |
| webshell_webshells_new_PHP1 | Web shells - generated from file PHP1.php | Florian Roth | Open |
| webshell_webshells_new_php2 | Web shells - generated from file php2.php | Florian Roth | Open |
| webshell_webshells_new_php5 | Web shells - generated from file php5.php | Florian Roth | Open |
| webshell_webshells_new_php6 | Web shells - generated from file php6.php | Florian Roth | Open |
| webshell_webshells_new_pppp | Web shells - generated from file pppp.php | Florian Roth | Open |
| webshell_webshells_new_radhat | Web shells - generated from file radhat.asp | Florian Roth | Open |
| webshell_webshells_new_xxx | Web shells - generated from file xxx.php | Florian Roth | Open |
| webshell_webshells_new_xxxx | Web shells - generated from file xxxx.php | Florian Roth | Open |
| WebShell_webshells_zehir4 | Webshells Github Archive - file zehir4 | Florian Roth | Open |
| webshell_webshell_123 | Web shells - generated from file webshell-123.php | Florian Roth | Open |
| webshell_webshell_cnseay02_1 | Web Shell - file webshell-cnseay02-1.php | Florian Roth | Open |
| webshell_webshell_cnseay_x | Web Shell - file webshell-cnseay-x.php | Florian Roth | Open |
| WebShell_Web_shell__c_ShAnKaR | PHP Webshells Github Archive - file Web-shell (c)ShAnKaR.php | Florian Roth | Open |
| webshell_WinX_Shell | Web Shell - file WinX Shell.php | Florian Roth | Open |
| webshell_Worse_Linux_Shell | Web Shell - file Worse Linux Shell.php | Florian Roth | Open |
| webshell_wsb_idc | Web Shell - file idc.php | Florian Roth | Open |
| webshell_wso2_5_1_wso2_5_wso2 | Web Shell - from files wso2.5.1.php, wso2.5.php, wso2.php | Florian Roth | Open |
| webshell_zacosmall | Web Shell - file zacosmall.php | Florian Roth | Open |
| Webshell_zehir | Detects Webshell - rule generated from from files elmaliseker.asp, zehir.asp, zehir.txt, zehir4.asp, zehir4.txt | Florian Roth | Open |
| WebShell_ZyklonShell | PHP Webshells Github Archive - file ZyklonShell.php | Florian Roth | Open |
| WebShell__Ajax_PHP_Command_Shell_Ajax_PHP_Command_Shell_soldierofallah | PHP Webshells Github Archive - from files Ajax_PHP Command Shell.php, Ajax_PHP_Command_Shell.php, soldierofallah.php | Florian Roth | Open |
| WebShell__CrystalShell_v_1_erne_stres | PHP Webshells Github Archive - from files CrystalShell v.1.php, erne.php, stres.php | Florian Roth | Open |
| WebShell__CrystalShell_v_1_sosyete_stres | PHP Webshells Github Archive - from files CrystalShell v.1.php, sosyete.php, stres.php | Florian Roth | Open |
| WebShell__Cyber_Shell_cybershell_Cyber_Shell__v_1_0_ | PHP Webshells Github Archive - from files Cyber Shell.php, cybershell.php, Cyber Shell (v 1.0).php | Florian Roth | Open |
| WebShell__findsock_php_findsock_shell_php_reverse_shell | PHP Webshells Github Archive - from files findsock.c, php-findsock-shell.php, php-reverse-shell.php | Florian Roth | Open |
| WebShell__PH_Vayv_PHVayv_PH_Vayv | PHP Webshells Github Archive - from files PH Vayv.php, PHVayv.php, PH_Vayv.php | Florian Roth | Open |
| WebShell__Small_Web_Shell_by_ZaCo_small_zaco_zacosmall | PHP Webshells Github Archive - from files Small Web Shell by ZaCo.php, small.php, zaco.php, zacosmall.php | Florian Roth | Open |
| Websites | Open | ||
| WEB_INF_web | Laudanum Injector Tools - file web.xml | Florian Roth | Open |
| web_shell_crews | @patrickrolsen | Open | |
| Weevely_Webshell | Weevely Webshell - Generic Rule - heavily scrambled tiny web shell | Florian Roth | Open |
| wh_bindshell_py | Semi-Auto-generated - file wh_bindshell.py.txt | Neo23x0 Yara BRG + customization by Stefan -dfate- Molls | Open |
| winshell | Webshells Auto-generated - file winshell.exe | Yara Bulk Rule Generator by Florian Roth | Open |
| WinX_Shell_html | Semi-Auto-generated - file WinX Shell.html.txt | Neo23x0 Yara BRG + customization by Stefan -dfate- Molls | Open |
| Win_Trojan_ShellcodeBindTcp_1 | Open | ||
| Win_Trojan_ShellcodeBindTcp_2 | Open | ||
| Win_Trojan_ShellcodeFindKernel32_1 | Open | ||
| Win_Trojan_ShellcodeReverseTcp_1 | Open | ||
| Win_Trojan_ShellExec_1 | Open | ||
| Win_Trojan_ShellExec_2 | Open | ||
| Win_Trojan_ShellExec_3 | Open | ||
| Win_Trojan_ShellExec_4 | Open | ||
| Win_Trojan_ShellHook_1 | Open | ||
| Win_Trojan_ShellHook_2 | Open | ||
| Win_Trojan_ShellHook_3 | Open | ||
| Win_Trojan_ShellHook_4 | Open | ||
| Win_Trojan_ShellHook_5 | Open | ||
| Win_Trojan_ShellHook_6 | Open | ||
| Win_Trojan_Shell_1 | Open | ||
| Win_Trojan_Shell_11 | Open | ||
| Win_Trojan_Shell_12 | Open | ||
| Win_Trojan_Shell_13 | Open | ||
| Win_Trojan_Shell_14 | Open | ||
| Win_Trojan_Shell_15 | Open | ||
| Win_Trojan_Shell_16 | Open | ||
| Win_Trojan_Shell_17 | Open | ||
| Win_Trojan_Shell_18 | Open | ||
| Win_Trojan_Shell_19 | Open | ||
| Win_Trojan_Shell_20 | Open | ||
| Win_Trojan_Shell_21 | Open | ||
| Win_Trojan_Shell_22 | Open | ||
| Win_Trojan_Shell_23 | Open | ||
| Win_Trojan_Shell_24 | Open | ||
| Win_Trojan_Shell_25 | Open | ||
| Win_Trojan_Shell_26 | Open | ||
| Win_Trojan_Shell_27 | Open | ||
| Win_Trojan_Shell_28 | Open | ||
| Win_Trojan_Shell_29 | Open | ||
| Win_Trojan_Shell_30 | Open | ||
| Win_Trojan_Shell_31 | Open | ||
| Win_Trojan_Shell_32 | Open | ||
| Win_Trojan_Shell_33 | Open | ||
| Win_Trojan_Shell_34 | Open | ||
| Win_Trojan_Shell_35 | Open | ||
| Win_Trojan_Shell_36 | Open | ||
| Win_Trojan_Shell_37 | Open | ||
| Win_Trojan_Shell_38 | Open | ||
| Win_Trojan_Shell_39 | Open | ||
| Win_Trojan_Shell_40 | Open | ||
| Win_Trojan_Shell_41 | Open | ||
| Win_Trojan_Shell_42 | Open | ||
| Win_Trojan_Shell_43 | Open | ||
| Win_Trojan_Shell_44 | Open | ||
| Win_Trojan_Shell_45 | Open | ||
| Win_Trojan_Shell_46 | Open | ||
| Win_Trojan_Shell_47 | Open | ||
| Win_Trojan_Shell_48 | Open | ||
| Win_Trojan_Shell_49 | Open | ||
| Win_Trojan_Shell_50 | Open | ||
| Win_Trojan_Shell_51 | Open | ||
| Win_Trojan_Shell_52 | Open | ||
| Win_Trojan_Shell_53 | Open | ||
| Win_Trojan_Shell_54 | Open | ||
| Win_Trojan_Shell_55 | Open | ||
| Win_Trojan_Shell_56 | Open | ||
| Win_Trojan_Shell_57 | Open | ||
| Win_Trojan_Shell_58 | Open | ||
| Win_Trojan_Shell_59 | Open | ||
| Win_Trojan_Shell_60 | Open | ||
| Win_Trojan_Shell_61 | Open | ||
| Win_Trojan_Shell_62 | Open | ||
| Win_Trojan_Shell_64 | Open | ||
| Win_Trojan_Shell_65 | Open | ||
| Win_Trojan_Shell_66 | Open | ||
| Win_Trojan_Shell_67 | Open | ||
| Win_Trojan_Shell_68 | Open | ||
| Win_Trojan_Shell_69 | Open | ||
| Worse_Linux_Shell_php | Semi-Auto-generated - file Worse Linux Shell.php.txt | Neo23x0 Yara BRG + customization by Stefan -dfate- Molls | Open |
| wso | WSO webshell | @tenacioustek | Open |
