Intrusion PreventionBehinder.Webshell
Description
This indicates an attempt to use Behinder web shell.
A web shell is a malicious script, acting as a backdoor, that can be uploaded to a web server to enable remote administration of the machine. Web shells are often installed by attackers through web application vulnerabilities or configuration weaknesses.
Affected Products
Any compromised server
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
Remove the malicious file from the server.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2021-05-06 | 18.074 |
Modified
|
Sig Added |
| 2021-04-22 | 18.064 |
Modified
|
Sig Added |
| 2021-04-21 | 18.063 |
Modified
|
Sig Added |
| 2021-04-19 | 18.061 |
Modified
|
Sig Added |
| 2021-04-12 | 18.055 |
Modified
|
Sig Added |
| 2020-08-10 | 15.902 |
Modified
|
Default_action:pass:drop |
| 2020-08-04 | 15.899 |
Modified
|
Sig Added |
| 2020-07-27 | 15.894 |
Modified
|
Sig Added |
| 2020-06-30 | 15.876 |
New
|
| ID | 49306 |
| Created | Jun 22, 2020 |
| Updated | Sep 04, 2023 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris |
| Affected App | PHP_app, ASP_app |
| Profile Type | Malware |