{"id":41254669,"url":"https://github.com/c1982/shellboy","last_synced_at":"2026-01-23T01:48:25.305Z","repository":{"id":53536257,"uuid":"347664026","full_name":"c1982/shellboy","owner":"c1982","description":"simple webshell scanner","archived":false,"fork":false,"pushed_at":"2021-03-26T10:41:36.000Z","size":4832,"stargazers_count":47,"open_issues_count":0,"forks_count":7,"subscribers_count":4,"default_branch":"main","last_synced_at":"2024-06-19T00:35:30.329Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/c1982.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-03-14T14:46:55.000Z","updated_at":"2023-09-27T06:55:47.000Z","dependencies_parsed_at":"2022-09-09T09:41:58.885Z","dependency_job_id":null,"html_url":"https://github.com/c1982/shellboy","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/c1982/shellboy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c1982%2Fshellboy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c1982%2Fshellboy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c1982%2Fshellboy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c1982%2Fshellboy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/c1982","download_url":"https://codeload.github.com/c1982/shellboy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/c1982%2Fshellboy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28677711,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-23T01:00:35.747Z","status":"ssl_error","status_checked_at":"2026-01-23T01:00:19.529Z","response_time":144,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-01-23T01:48:22.320Z","updated_at":"2026-01-23T01:48:25.293Z","avatar_url":"https://github.com/c1982.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# shellboy\n\nShellBoy is a useful web shell finder. It simply knows the signatures of active or inactive webshells on the market and looks for these signatures in files on your server. \n\n## Latest Release\n\nPlease follow github release pages for binaries\n\n* [github.com/c1982/shellboy/releases/latest](https://github.com/c1982/shellboy/releases/latest)\n\n## Usage\n\nShellBoy is designed as a command line application. You can run it directly by giving the main directory you want to be scanned. \n\n\u003e ./shellboy --directory=/usr/local/vhosts\n\n## Parameters\n\n|args| desc |\n|---|---|\n| directory  | Root directory for scan |\n| score | Minimum similarity score |\n| minbytes | Minimum file size (byte). Default 4kb |\n| maxbytes | Maximum file size (byte). Default 1Mb |\n| excludes | Excluded file extensions. Empty is disabled |\n| includes | Included file extensions. Default empty |\n| help | Display this help message |\n| v | Verbose mode |\n\n## Examples\n\nScan only PHP files.\n\n\u003eshellboy --directory=/usr/local/vhosts --includes=php,phps\n\nExclude images files sanning\n\n\u003eshellboy --directory=/usr/local/vhosts --excludes=jpeg,png,gif\n\nChange minimum similarity score. This value increases skepticism \n\n\u003eshellboy --directory=/usr/local/vhosts --score=75\n\n\n# Yara Files Sources\n* https://raw.githubusercontent.com/Neo23x0/signature-base/50f14d7d1def5ee1032158af658a5c0b82fe50c9/yara/thor-webshells.yar\n* https://github.com/DarkenCode/yara-rules/blob/master/malware/Webshell-shell.yar\n\n# Data Sources\n* https://github.com/tennc/webshell.git\n* https://github.com/ysrc/webshell-sample.git\n* https://github.com/xl7dev/WebShell.git\n* https://github.com/JohnTroony/php-webshells/tree/master/Collection\n* https://github.com/tanjiti/webshellSample.git\n* https://github.com/BlackArch/webshells\n* https://github.com/tutorial0/WebShell","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fc1982%2Fshellboy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fc1982%2Fshellboy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fc1982%2Fshellboy/lists"}