A comprehensive repository of multi-language web shell samples designed for security research, detection system validation, and forensic analysis.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install web-shells
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install web-shells using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is SecLists Web-Shells?
SecLists Web-Shells is a specialized collection of web shell samples sourced from the renowned SecLists repository. It provides security professionals and developers with a diverse array of shells written in PHP, ASP, ASPX, JSP, Python, and Perl. This skill is an essential asset for those utilizing Openclaw Skills to build or test robust security monitoring systems, allowing for the simulation of adversarial persistence techniques in a controlled and authorized manner.
By integrating these samples into your workflow, you can effectively validate the efficacy of Intrusion Detection Systems (IDS), Endpoint Detection and Response (EDR) solutions, and Web Application Firewalls (WAF). Whether you are conducting malware analysis or developing custom security signatures, this skill offers the raw data needed to improve defensive posture across various server environments.
SecLists Web-Shells Use Cases
- Testing and validating web shell detection rules in security monitoring tools.
- Developing and refining IDS/IPS signatures for diverse server-side languages.
- Conducting authorized penetration testing and red teaming exercises.
- Forensic research and malware analysis within isolated lab environments.
- Educational demonstrations of web-based persistence mechanisms in CTF competitions.
How SecLists Web-Shells Works
- The user identifies the specific web shell language (e.g., PHP, JSP) required for the testing scenario.
- Openclaw Skills provides access to the curated SecLists directory within the local reference environment.
- The security tool or agent loads the payload from the designated skill path to simulate an upload or execution event.
- Defensive systems are monitored to verify if the specific shell pattern or behavior triggers an alert.
- Post-analysis is performed to refine detection logic based on the shell's unique characteristics.
SecLists Web-Shells Setup
To utilize this skill within your security workspace, ensure you have the Openclaw Skills framework initialized. You can reference the files locally after cloning the repository:
# Navigate to your skills directory
cd references/Web-Shells
# List available shell categories
ls -R
Ensure that your execution environment is isolated (sandbox or lab) to prevent accidental exposure of shell scripts to public-facing servers.
SecLists Web-Shells Data Schema & Taxonomy
The skill organizes payloads by programming language and technology stack to facilitate targeted testing.
| Directory / File | Description |
|---|---|
PHP shells |
Collection of common PHP-based web shells and backdoors. |
ASP/ASPX shells |
Microsoft IIS compatible web shells for Windows environments. |
JSP shells |
Java Server Pages shells for Apache Tomcat and J2EE servers. |
Python shells |
Scripts for Python-based web frameworks and environments. |
Perl shells |
Legacy and modern Perl-based web shell samples. |
SecLists Web-Shells Advanced Features
- Multi-language support covering almost all major web server environments.
- Seamless integration with Python scripts for automated payload scanning and pattern matching.
- Support for multi-agent security simulations where one agent deploys and another detects.
- Compatible with forensic tools for creating custom file integrity monitoring (FIM) baselines.
- Regularly updated through the core SecLists project to include emerging shell variants.
SKILL.md
Loading
Related Openclaw Skills
Precedent
A professional-grade reference tool for legal case law analysis, binding authority hierarchy, and the doctrine of stare decisis.
Germination
A comprehensive technical reference for seed germination science, dormancy breaking, and viability testing protocols.
Knowledge Base Recorder
An automated document archiver that extracts summaries and categorizes links directly into a WeCom smart spreadsheet.
Statute
A specialized AI skill for navigating legal statutes, legislative processes, and statutory interpretation rules.
Intent Translation Skill
A professional AI translator that bridges the gap between vague human intuition and precise, executable machine instructions.
University Solution Explainer
A specialized AI skill designed to break down university-level STEM problems into student-friendly, logical workflows.
Featured*
