Awesome webshell collection. Including 150 Github repo, and 200+ blog posts.
-
Updated
Dec 30, 2019
#
webshell-detect
Here are 10 public repositories matching this topic...
基于机器学习的 Webshell 检测 (OPCode -> N-Gram -> TF-IDF -> XGBoost)
-
Updated
Jun 13, 2021 - PHP
机器学习NB算法实现基于文本的WebShell检测工具
-
Updated
Jan 11, 2022 - Python
This repository for php shell file...
-
Updated
May 31, 2022 - PHP
Mergen is a project that facilitates the analysis of traffic by logging incoming web traffics to ASP.NET applications broadcasting with Microsoft IIS (Internet Information Services) service.
incident-response packet-analyser packet-sniffer network-analysis packet-capture forensic-analysis packet-analyzer blueteam blue-team packet-tracer iis-server incident-response-tooling webshelldetect webshell-detect webshell-analysis web-traffic-analysis webshell-detection forensics-tools
-
Updated
Apr 2, 2022 - C#
WP-Cleaner scans a hacked WordPress installation and helps you clean it up
php wordpress incident-response web-security antivirus wordpress-security php-cli security-tools devsecops cli-tool vulnerability-scanner malware-scanner integrity-checker malware-removal cibersecurity webshell-detect cve-scanner
-
Updated
Oct 12, 2026 - PHP
Ferramenta de threat hunting read-only para Zimbra. Detecta mineradores, webshells JSP, persistência via cron/systemd e IOCs correlacionados. Gera dashboard HTML + relatório TXT + manifesto SHA-256.
bash ioc python3 dfir zimbra vulnerability-detection forensic-analysis security-tools malware-detection read-only blue-team threat-detection webshell-detect cryptominer-detection
-
Updated
Oct 12, 2026 - Python
Scan Backdoors is a lightweight, dependency-free signature scanner (Python 3.6+) designed to detect backdoors, web shells, and malicious code in Joomla and PHP sites. Features multi-processing, baseline diffing against clean distributions, and multiple export formats (CSV, JSON, XLSX).
php security backdoor scanner joomla cybersecurity security-scanner webshell backdoor-finder security-tools vulnerability-scanner malware-scanner webshelldetect webshell-scan webshell-detect backdoor-detection vulnerability-scanner-tools
-
Updated
Oct 19, 2026 - Python
This mock case study of a malicious file upload and web shell planting attack illustrates the anatomy of a modern application-layer intrusion and its full lifecycle across investigation, containment, and remediation.
-
Updated
Apr 28, 2025 - Jupyter Notebook
Advanced Web Recon Engine Built for speed. Engineered for scale. Designed to outpace. Precision. Power. Performance.
-
Updated
Feb 26, 2026
Add this topic to your repo
To associate your repository with the webshell-detect topic, visit your repo's landing page and select "manage topics."