> For the complete documentation index, see [llms.txt](https://dmcxblue.gitbook.io/red-team-notes-2-0/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dmcxblue.gitbook.io/red-team-notes-2-0/red-team-techniques/persistence/t1505-server-software-component/webshell.md).

# WebShell

Adversaries may backdoor web servers with web shells to establish persistent access to systems. A Web shell is a Web script that is placed on an openly Web server to allow an adversary to access the Web server as a gateway into a network. A Web shell may provide a set of functions to execute or a command-line interface on the system that hosts the Web server.

Simply pacing a PHP shell onto the webserver of a Linux machine allows me command execution via the Web Browser

<figure><img src="/files/lTKoyVERopHpJqNiw2Ls" alt=""><figcaption></figcaption></figure>