// Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.
| name | SecLists Web-Shells |
| description | Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing. |
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
Source: SecLists/Web-Shells Repository: https://github.com/danielmiessler/SecLists License: MIT
Use this skill when you need:
⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
PHP shells - Common PHP web shellsASP/ASPX shells - Microsoft web shellsJSP shells - Java server pages shellsPython shells - Python-based shellsPerl shells - Perl web shells# Access files from this skill
import os
# Example: Load patterns/payloads
skill_path = "references/Web-Shells"
# List all available files
for root, dirs, files in os.walk(skill_path):
for file in files:
if file.endswith('.txt'):
filepath = os.path.join(root, file)
print(f"Found: {filepath}")
# Read file content
with open(filepath, 'r', errors='ignore') as f:
content = f.read().splitlines()
print(f" Lines: {len(content)}")
This is a curated subset of SecLists. For the complete collection:
Generated by Skill Seeker | SecLists Web-Shells Collection License: MIT - Use responsibly with proper authorization