Intrusion PreventionYsoserial.JSP.Web.Shell
Description
This indicates an attempt to use Ysoserial JSP web shell.
A web shell is a malicious script, acting as a backdoor, that can be uploaded to a web server to enable remote administration of the machine. Web shells are often installed by attackers through web application vulnerabilities or configuration weaknesses.
Affected Products
Any compromised server
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
Remove the malicious JSP file from the server.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-06-05 | 23.568 | Name:Ysoserial. JSP. Webshell:Ysoserial. JSP. Web. Shell |
| ID | 44976 |
| Created | Dec 12, 2017 |
| Updated | Jun 02, 2023 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |