LandGrey/webshell-detect-bypass resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1737 stars · 386 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of research articles and evasion-ready webshell source code (PHP, JSP, ASP) demonstrating techniques to bypass professional webshell detection tools. It is intended for authorized security research and defensive study, covering topics like one-line trojans, Java reflection-based JSP shells, and in-memory webshells.

Use cases

• study how webshells evade detection tools
• write detection rules for evasive php webshells
• learn jsp backdoor bypass via java reflection
• understand in-memory webshell injection in spring
• research asp one-line trojan evasion techniques
• improve webshell scanner coverage against bypass samples
• train blue teams on hidden shell traffic patterns

When to choose

• you are a security researcher studying webshell detection evasion
• you build or test webshell scanners and need bypass samples
• you are doing authorized red-team work and need evasion references
• you want to harden WAF or antivirus detection rules

When to avoid

• you need a production security tool or scanner
• you lack authorization to test target systems
• you want maintained software with a license and active releases
• you need defensive tooling rather than research material

Facets

learning-resource · maturity maintenance

security penetration-testing vulnerability-scanning security penetration-testing web-development cross-platform webshell detection-bypass backdoor php-webshell jsp-webshell asp-webshell antivirus-evasion red-team offensive-security security-research

Member repositories

For agents

markdown · JSON · MCP: product_card(name="LandGrey/webshell-detect-bypass")