https://github.com/landgrey/webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell
https://github.com/landgrey/webshell-detect-bypass

asp-webshell backdoor bypass-antivirus detection-bypass hidden-shells jsp-webshell php-webshell php-webshells webshell

Last synced: 22 days ago
JSON representation

绕过专业工具检测的Webshell研究文章和免杀的Webshell

• Host: GitHub
• URL: https://github.com/landgrey/webshell-detect-bypass
• Owner: LandGrey
• Created: 2018-05-16T12:03:59.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2020-11-15T11:45:49.000Z (almost 4 years ago)
• Last Synced: 2024-09-30T11:41:55.012Z (about 1 month ago)
• Topics: asp-webshell, backdoor, bypass-antivirus, detection-bypass, hidden-shells, jsp-webshell, php-webshell, php-webshells, webshell
• Language: Classic ASP
• Homepage:
• Size: 10.5 MB
• Stars: 1,681
• Watchers: 48
• Forks: 406
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-webshell - **501**星

README

        
## Webshell-Detect-Bypass

**此项目用来存放我绕过专业工具检测的Webshell研究文章和免杀的Webshell源码.**

### 免责声明

```

1. 在对方未授权的情况下，直接或间接利用本项目涉及到的 webshell 研究样本攻击目标是违法行为.

2. 本项目涉及到的 webshell 仅为安全研究和授权情况下使用，其使用人员有责任和义务遵守当地法律条规.

3. 本项目涉及到的 webshell 样本及文章仅为促进安全防御研究使用，研究人员对因误用该程序造成的资产损坏和损失概不负责.

```

### Articles

- [**php一句话木马检测绕过研究**](https://github.com/LandGrey/webshell-detect-bypass/tree/master/docs/php-webshell-detect-bypass/php-webshell-detect-bypass.md)

- [**利用Java反射和类加载机制绕过JSP后门检测**](https://github.com/LandGrey/webshell-detect-bypass/tree/master/docs/using-java-reflection-and-ClassLoader-bypass-webshell-detection/using-java-reflection-and-ClassLoader-bypass-webshell-detection.md)

- [**构造免杀的asp一句话木马**](https://github.com/LandGrey/webshell-detect-bypass/tree/master/docs/asp-webshell-detect-bypass/asp-webshell-detect-bypass.md)

- [**菜刀HTTP流量中转代理过WAF**](https://github.com/LandGrey/webshell-detect-bypass/tree/master/docs/china-chopper-http-proxy/china-chopper-http-proxy.md)

- [**基于内存 Webshell 的无文件攻击技术研究**](https://github.com/LandGrey/webshell-detect-bypass/tree/master/docs/spring-inject-webshell/spring-inject-webshell.md)

- [**利用 intercetor 注入 spring 内存 webshell**](https://github.com/LandGrey/webshell-detect-bypass/tree/master/docs/inject-interceptor-hide-webshell/inject-interceptor-hide-webshell.md)

### Webshells

- #### [php](https://github.com/LandGrey/webshell-detect-bypass/tree/master/webshell/php)

- #### [jsp](https://github.com/LandGrey/webshell-detect-bypass/tree/master/webshell/jsp)

- #### [asp](https://github.com/LandGrey/webshell-detect-bypass/tree/master/webshell/asp)