threedr3am/JSP-WebShells resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1398 stars · 328 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of JSP webshell samples demonstrating various implementation techniques such as class loading, bytecode manipulation, script engines, deserialization, and dynamic compilation. It is intended for security research and defensive self-auditing, not for launching attacks.

Use cases

• study JSP webshell evasion techniques
• build detection rules for JSP backdoors
• test webshell scanners against known variants
• research Java class loading and deserialization abuse
• audit Java web applications for webshell risks
• learn offensive security techniques for Java servers

When to choose

• you need reference samples of diverse JSP webshell implementations
• you are writing or benchmarking webshell detection tools
• you research Java security and evasion techniques

When to avoid

• you want a ready-to-use offensive hacking tool
• you need a maintained webshell management framework
• you need non-Java (PHP/ASP) webshell samples

Facets

dataset · maturity maintenance

security penetration-testing vulnerability-scanning developer-tools security penetration-testing web-development developer-tools jvm cross-platform jsp webshell java security-research backdoor detection-bypass collection red-team web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="threedr3am/JSP-WebShells")