Kali Linux Tutorials

Shell Backdoor is a malicious piece of code (e.g. PHP, Python, Ruby) that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own.

How to upload?

Hackers usually take advantage of an upload panel designed for uploading images onto sites. This is usually found once the hacker has logged in as the admin of the site. Shells can also be uploaded via exploits or remote file inclusion, or a virus on the computer.

Uses

Shells have many uses. They can be used to edit the webserver directory index page of site, and then hackers can leave their mark or “deface” for visitors to the site to see when they go to the homepage. Hackers may also use it to bruteforce FTP or cPanel, allowing them more access to the website. Shells can also be used to gain root access to the site. Some hackers may choose to host malware or spyware on the sites they have uploaded their shell to using various exploits.

• Please note that many shells contain malware and ‘Mark / deface page’ might contain malware to obtain visitor’s password as well.

Also Read – SWFPFinder : SWF Potential Parameters Finder

Prevention

To prevent a site from having a shell uploaded onto it, a webmaster must always keep up with the latest security updates and make sure to have a secure admin panel. They must also make sure that if they do have an admin panel they make sure it only permits the user to upload .jpeg, .png, and other image file types only.

Shell Backdoor List

PHP Shell :

• B374K Shell
• C99 Shell
• R57 Shell
• Wso Shell
• 0byt3m1n1 Shell
• Alfa Shell
• AK-47 Shell
• Indoxploit Shell
• Marion001 Shell
• Mini Shell
• p0wny-shell
• Sadrazam Shell
• Webadmin Shell
• WordPress Shell

ASP Shell :

• Pouya Shell
• Kacak Asp Shell
• Asp Cmd (Old ISS)
• Asp Cmd (New ISS)