A curated collection of web shell samples from the SecLists project, covering PHP, ASP, ASPX, JSP, Python, and Perl variants. You'd use this when testing detection systems, validating security monitoring tools, or doing malware analysis in a lab environment. The samples are pulled from Daniel Miessler's well-known SecLists repository, which is a standard resource in the security community. Obviously this is strictly for authorized security work, your own systems, or educational purposes. The real value is having known-bad files to verify your IDS/IPS signatures are actually firing, or to train detection models without hunting down samples yourself.

skills.sh installs
580
GitHub stars
400
last updated
Jun 8, 2026

Install

$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-webshells --agent claude-code

Installs into .claude/skills of the current project.

Files

SecLists Web-Shells

Description

Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.

Source: SecLists/Web-Shells Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • Web shell detection testing
  • Security monitoring validation
  • Malware analysis
  • IDS/IPS signature testing
  • Forensics research

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • PHP shells - Common PHP web shells
  • ASP/ASPX shells - Microsoft web shells
  • JSP shells - Java server pages shells
  • Python shells - Python-based shells
  • Perl shells - Perl web shells

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Web-Shells"

Sponsors

Details

Repository
github.com/eyadkelleh/awesome-skills-security
Categories
Testing & QA, Security, Data Science & ML, Python, CLI & Terminal, PHP & Laravel
First seen
Jun 11, 2026

More from eyadkelleh/awesome-skills-security

All 7
1new-silvermoon avatarandroid-emulator-skillnew-silvermoon/awesome-android-agent-skillsProduction-ready scripts for Android app testing, building, and automation. Provides semantic UI navigation, build automation, log monitoring, and emulator life578skills.sh installs
2jshchnz avatarschedulerjshchnz/claude-code-schedulerSchedules Claude Code tasks to run automatically at specific times using native OS schedulers (launchd on macOS, crontab on Linux, Task Scheduler on Windows). H574skills.sh installs
3longbridge avatarlongbridge-valuationlongbridge/skillsValuation analysis for a single stock via Longbridge — current PE / PB / PS / EV-EBITDA snapshot, historical percentile (1–3 years), industry median + relative 571skills.sh installs
4alirezarezvani avatarstatistical-analystalirezarezvani/claude-skillsRun hypothesis tests, analyze A/B experiment results, calculate sample sizes, and interpret statistical significance with effect sizes. Use when you need to val566skills.sh installs
5rshankras avatarproduct-developmentrshankras/claude-code-apple-skillsEnd-to-end product development for iOS/macOS apps. Covers market research, competitive analysis, PRD generation, architecture specs, UX design, implementation g564skills.sh installs
6mohitmishra786 avatarzig-build-systemmohitmishra786/low-level-dev-skillsZig build system skill for multi-file Zig projects. Use when writing or debugging build.zig files, adding executables or libraries, integrating C source files, 552skills.sh installs