
Security Webshells
A curated collection of web shell samples from the SecLists project, covering PHP, ASP, ASPX, JSP, Python, and Perl variants. You'd use this when testing detection systems, validating security monitoring tools, or doing malware analysis in a lab environment. The samples are pulled from Daniel Miessler's well-known SecLists repository, which is a standard resource in the security community. Obviously this is strictly for authorized security work, your own systems, or educational purposes. The real value is having known-bad files to verify your IDS/IPS signatures are actually firing, or to train detection models without hunting down samples yourself.
- skills.sh installs
- 580
- GitHub stars
- 400
- last updated
- Jun 8, 2026
Install
$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-webshells --agent claude-codeInstalls into .claude/skills of the current project.
Files
SecLists Web-Shells
Description
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
Source: SecLists/Web-Shells Repository: https://github.com/danielmiessler/SecLists License: MIT
When to Use This Skill
Use this skill when you need:
- Web shell detection testing
- Security monitoring validation
- Malware analysis
- IDS/IPS signature testing
- Forensics research
⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
Key Files in This Skill
PHP shells - Common PHP web shellsASP/ASPX shells - Microsoft web shellsJSP shells - Java server pages shellsPython shells - Python-based shellsPerl shells - Perl web shells
Usage Example
# Access files from this skill
import os
# Example: Load patterns/payloads
skill_path = "references/Web-Shells"
Sponsors
Details
- Repository
- github.com/eyadkelleh/awesome-skills-security
- Categories
- Testing & QA, Security, Data Science & ML, Python, CLI & Terminal, PHP & Laravel
- First seen
- Jun 11, 2026