Skip to content
WSTECHNICZNE
TechnicalHow it works under the hood

Web Shell

A script uploaded to a server that allows executing system commands via a regular HTTP request — without SSH or server password.

Why it matters

Gives the attacker as much power as the web server process: access to databases, file modification, email sending, and attacks on other services on the same account.

What's missing without it

Without scanning for such patterns, a web shell survives updates and migrations — as it's just a regular PHP file in a directory no one checks.

When it is used

During incident response audits and periodically on services accepting user-uploaded files.

How we use it

Recognizable code patterns: `eval(base64_decode(...))`, `assert($_POST[...])`, `$_POST["x"]($_POST["y"])`.

Numbers worth knowing

Technical in data

470 000 000 000

IDC Worldwide AI and Generative AI Spending Guide 2026 V2 prognozuje, że europejskie wydatki na AI osiągną blisko 470 mld dolarów do 2030 roku

IDC09/2026Europe

470 000 000 000

Prognozowane całkowite wydatki na AI w Europie w 2030 roku według IDC Worldwide AI and Generative AI Spending Guide 2026 V2

IDC09/2026Europe

26%

Prognozowany udział w pełni elektrycznych pojazdów (BEV, bez hybryd) w europejskim parku samochodowym do 2035 roku, w porównaniu z 4% w 2025 r.

BCG2035Europe

Figures from the same field — collected in our market data base.

Related terms