{"id":479647,"date":"2023-08-09T10:43:04","date_gmt":"2023-08-09T10:43:04","guid":{"rendered":""},"modified":"2023-09-05T11:19:16","modified_gmt":"2023-09-05T11:19:16","slug":"web-shell","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/kr\/wiki\/web-shell\/","title":{"rendered":"\uc6f9 \uc178"},"content":{"rendered":"<p>\uc6f9 \uc178\uc740 \uc0ac\uc774\ubc84 \ubc94\uc8c4\uc790\uac00 \ubb34\ub2e8 \uc561\uc138\uc2a4 \ubc0f \uc81c\uc5b4 \uad8c\ud55c\uc744 \uc5bb\uae30 \uc704\ud574 \uc6f9 \uc11c\ubc84\uc5d0 \ubc30\ud3ec\ud558\ub294 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8 \ub610\ub294 \ud504\ub85c\uadf8\ub7a8\uc744 \ub9d0\ud569\ub2c8\ub2e4. \uc774 \ubd88\ubc95 \ub3c4\uad6c\ub294 \uacf5\uaca9\uc790\uc5d0\uac8c \uc6d0\uaca9 \uba85\ub839\uc904 \uc778\ud130\ud398\uc774\uc2a4\ub97c \uc81c\uacf5\ud558\uc5ec \uc11c\ubc84\ub97c \uc870\uc791\ud558\uace0 \ubbfc\uac10\ud55c \ub370\uc774\ud130\uc5d0 \uc561\uc138\uc2a4\ud558\uba70 \ub2e4\uc591\ud55c \uc545\uc758\uc801\uc778 \ud65c\ub3d9\uc744 \uc218\ud589\ud560 \uc218 \uc788\uac8c \ud574\uc90d\ub2c8\ub2e4. OneProxy(oneproxy.pro)\uc640 \uac19\uc740 \ud504\ub85d\uc2dc \uc11c\ubc84 \uc81c\uacf5\uc5c5\uccb4\uc758 \uacbd\uc6b0 \uc11c\ube44\uc2a4\uc758 \ubcf4\uc548\uacfc \ubb34\uacb0\uc131\uc744 \ubcf4\uc7a5\ud558\ub824\uba74 \uc6f9 \uc178\uacfc \uadf8 \uc758\ubbf8\ub97c \uc774\ud574\ud558\ub294 \uac83\uc774 \uc911\uc694\ud569\ub2c8\ub2e4.<\/p>\n<h2>\uc6f9\uc258\uc758 \uc720\ub798\uc640 \ucd5c\ucd08 \uc5b8\uae09\uc758 \uc5ed\uc0ac<\/h2>\n<p>\uc6f9 \uc178\uc758 \uac1c\ub150\uc740 1990\ub144\ub300 \ud6c4\ubc18 \uc778\ud130\ub137\uacfc \uc6f9 \uae30\uc220\uc774 \ub300\uc911\ud654\ub418\uba74\uc11c \ub4f1\uc7a5\ud588\uc2b5\ub2c8\ub2e4. \ucc98\uc74c\uc5d0\ub294 \uc6f9 \uad00\ub9ac\uc790\uac00 \uc11c\ubc84\ub97c \uc6d0\uaca9\uc73c\ub85c \uc27d\uac8c \uad00\ub9ac\ud560 \uc218 \uc788\ub3c4\ub85d \ud558\ub294 \ud569\ubc95\uc801\uc778 \ubaa9\uc801\uc73c\ub85c \ub9cc\ub4e4\uc5b4\uc84c\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \uc0ac\uc774\ubc84 \ubc94\uc8c4\uc790\ub4e4\uc740 \ucde8\uc57d\ud55c \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \uc11c\ubc84\ub97c \uc545\uc6a9\ud558\uae30 \uc704\ud55c \uac15\ub825\ud55c \ub3c4\uad6c\ub85c\uc11c \uc6f9 \uc178\uc758 \uc7a0\uc7ac\ub825\uc744 \ube60\ub974\uac8c \uc778\uc2dd\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ubc94\uc8c4 \ub9e5\ub77d\uc5d0\uc11c \uc6f9 \uc178\uc774 \ucd5c\ucd08\ub85c \uc5b8\uae09\ub41c \uac83\uc740 \ub2e4\uc591\ud55c \ud574\ud0b9 \ud3ec\ub7fc\uacfc \uc6f9\uc0ac\uc774\ud2b8\uc5d0\uc11c \uc6f9 \uc178\uc758 \uae30\ub2a5\uacfc \uc6f9 \uc178\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc6f9\uc0ac\uc774\ud2b8\uc640 \uc11c\ubc84\ub97c \uc190\uc0c1\uc2dc\ud0a4\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \ub17c\uc758\ud558\uae30 \uc2dc\uc791\ud55c 2000\ub144\ub300 \ucd08\ubc18\uc73c\ub85c \uac70\uc2ac\ub7ec \uc62c\ub77c\uac11\ub2c8\ub2e4. \uadf8 \uc774\ud6c4\ub85c \uc6f9 \uc178\uc758 \uc815\uad50\ud568\uacfc \ubcf4\uae09\ub960\uc774 \ud06c\uac8c \uc99d\uac00\ud558\uc5ec \uc6f9 \uc11c\ubc84 \uad00\ub9ac\uc790\uc640 \ubcf4\uc548 \uc804\ubb38\uac00\uc5d0\uac8c \uc2ec\uac01\ud55c \uc0ac\uc774\ubc84 \ubcf4\uc548 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uc6f9 \uc178\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \uc815\ubcf4 \u2013 \uc6f9 \uc178 \uc8fc\uc81c \ud655\uc7a5<\/h2>\n<p>\uc6f9 \uc178\uc740 PHP, ASP, Python \ub4f1\uc744 \ud3ec\ud568\ud55c \ub2e4\uc591\ud55c \ud504\ub85c\uadf8\ub798\ubc0d \uc5b8\uc5b4\ub85c \uad6c\ud604\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub4e4\uc740 \ubd80\uc801\uc808\ud55c \uc785\ub825 \uc720\ud6a8\uc131 \uac80\uc0ac, \ucde8\uc57d\ud55c \ube44\ubc00\ubc88\ud638, \uc624\ub798\ub41c \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ubc84\uc804 \ub4f1 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774\ub098 \uc11c\ubc84\uc758 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud569\ub2c8\ub2e4. \uc6f9 \uc178\uc774 \uc131\uacf5\uc801\uc73c\ub85c \ubc30\ud3ec\ub418\uba74 \uc11c\ubc84\uc5d0 \ub300\ud55c \ubb34\ub2e8 \uc561\uc138\uc2a4\ub97c \ud5c8\uc6a9\ud558\uace0 \ub2e4\uc74c\uc744 \ud3ec\ud568\ud55c \ub2e4\uc591\ud55c \uc545\uc131 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc6d0\uaca9 \uba85\ub839 \uc2e4\ud589:<\/strong> \uacf5\uaca9\uc790\ub294 \uc190\uc0c1\ub41c \uc11c\ubc84\uc5d0\uc11c \uc6d0\uaca9\uc73c\ub85c \uc784\uc758\uc758 \uba85\ub839\uc744 \uc2e4\ud589\ud558\uc5ec \ud30c\uc77c\uc744 \ub2e4\uc6b4\ub85c\ub4dc\/\uc5c5\ub85c\ub4dc\ud558\uace0 \uc2dc\uc2a4\ud15c \uad6c\uc131\uc744 \uc218\uc815\ud558\ub294 \ub4f1\uc758 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ub370\uc774\ud130 \uc720\ucd9c:<\/strong> \uc6f9 \uc178\uc744 \uc0ac\uc6a9\ud558\uba74 \uc0ac\uc774\ubc84 \ubc94\uc8c4\uc790\uac00 \ub85c\uadf8\uc778 \uc790\uaca9 \uc99d\uba85, \uae08\uc735 \uc815\ubcf4, \uac1c\uc778 \ub370\uc774\ud130 \ub4f1 \uc11c\ubc84\uc5d0 \uc800\uc7a5\ub41c \ubbfc\uac10\ud55c \ub370\uc774\ud130\uc5d0 \uc561\uc138\uc2a4\ud558\uc5ec \uc774\ub97c \ud6d4\uce60 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ubc31\ub3c4\uc5b4 \uc0dd\uc131:<\/strong> \uc6f9 \uc178\uc740 \uc885\uc885 \ubc31\ub3c4\uc5b4 \uc5ed\ud560\uc744 \ud558\uc5ec \ucd08\uae30 \uc545\uc6a9 \ud328\uce58\uac00 \uc801\uc6a9\ub41c \ud6c4\uc5d0\ub3c4 \uacf5\uaca9\uc790\uc5d0\uac8c \ube44\ubc00 \uc9c4\uc785\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ubd07\ub137 \ubaa8\uc9d1:<\/strong> \uc77c\ubd80 \uace0\uae09 \uc6f9 \uc178\uc740 \uc190\uc0c1\ub41c \uc11c\ubc84\ub97c \ubd07\ub137\uc758 \uc77c\ubd80\ub85c \uc804\ud658\ud558\uc5ec DDoS(\ubd84\uc0b0 \uc11c\ube44\uc2a4 \uac70\ubd80) \uacf5\uaca9\uc774\ub098 \uae30\ud0c0 \uc545\uc758\uc801\uc778 \ud65c\ub3d9\uc5d0 \ud65c\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud53c\uc2f1 \ubc0f \ub9ac\ub514\ub809\uc158:<\/strong> \uacf5\uaca9\uc790\ub294 \uc6f9 \uc178\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud53c\uc2f1 \ud398\uc774\uc9c0\ub97c \ud638\uc2a4\ud305\ud558\uac70\ub098 \ubc29\ubb38\uc790\ub97c \uc545\uc131 \uc6f9\uc0ac\uc774\ud2b8\ub85c \ub9ac\ub514\ub809\uc158\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc6f9 \uc178\uc758 \ub0b4\ubd80 \uad6c\uc870 \u2013 \uc6f9 \uc178 \uc791\ub3d9 \ubc29\uc2dd<\/h2>\n<p>\uc6f9 \uc178\uc758 \ub0b4\ubd80 \uad6c\uc870\ub294 \uc0ac\uc6a9\ub41c \ud504\ub85c\uadf8\ub798\ubc0d \uc5b8\uc5b4\uc640 \uacf5\uaca9\uc790\uc758 \ubaa9\ud45c\uc5d0 \ub530\ub77c \ud06c\uac8c \ub2ec\ub77c\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \ub300\ubd80\ubd84\uc758 \uc6f9 \uc178\uc740 \ub2e4\uc74c\uacfc \uac19\uc740 \uacf5\ud1b5 \uc694\uc18c\ub97c \uacf5\uc720\ud569\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc6f9 \uc778\ud130\ud398\uc774\uc2a4:<\/strong> \uacf5\uaca9\uc790\uac00 \uc190\uc0c1\ub41c \uc11c\ubc84\uc640 \uc0c1\ud638 \uc791\uc6a9\ud560 \uc218 \uc788\uac8c \ud574\uc8fc\ub294 \uc0ac\uc6a9\uc790 \uce5c\ud654\uc801\uc778 \uc6f9 \uae30\ubc18 \uc778\ud130\ud398\uc774\uc2a4\uc785\ub2c8\ub2e4. \uc774 \uc778\ud130\ud398\uc774\uc2a4\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uba85\ub839\uc904 \uc778\ud130\ud398\uc774\uc2a4\ub098 \uc81c\uc5b4\ud310\uacfc \uc720\uc0ac\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud1b5\uc2e0 \ubaa8\ub4c8:<\/strong> \uc6f9 \uc178\uc5d0\ub294 \uacf5\uaca9\uc790\ub85c\ubd80\ud130 \uba85\ub839\uc744 \ubc1b\uace0 \uc751\ub2f5\uc744 \ub2e4\uc2dc \ubcf4\ub0bc \uc218 \uc788\ub294 \ud1b5\uc2e0 \ubaa8\ub4c8\uc774 \uc788\uc5b4\uc57c \uc11c\ubc84\ub97c \uc2e4\uc2dc\uac04\uc73c\ub85c \uc81c\uc5b4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud398\uc774\ub85c\ub4dc \uc2e4\ud589:<\/strong> \uc6f9 \uc178\uc758 \ud575\uc2ec \uae30\ub2a5\uc740 \uc11c\ubc84\uc5d0\uc11c \uc784\uc758\uc758 \uba85\ub839\uc744 \uc2e4\ud589\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uc774\ub294 \ucde8\uc57d\uc810\uc774\ub098 \ucde8\uc57d\ud55c \uc778\uc99d \uba54\ucee4\ub2c8\uc998\uc744 \uc545\uc6a9\ud558\uc5ec \ub2ec\uc131\ub429\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>Web Shell\uc758 \uc8fc\uc694 \uae30\ub2a5 \ubd84\uc11d<\/h2>\n<p>\uc0ac\uc774\ubc84 \ubc94\uc8c4\uc790\ub97c \uc704\ud55c \uac15\ub825\ud55c \ub3c4\uad6c\ub85c \ub9cc\ub4dc\ub294 \uc6f9 \uc178\uc758 \uc8fc\uc694 \uae30\ub2a5\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\ubab0\ub798 \ud558\uae30:<\/strong> \uc6f9 \uc178\uc740 \uc740\ubc00\ud558\uac8c \uc791\ub3d9\ud558\uc5ec \uc790\uc2e0\uc758 \uc874\uc7ac\ub97c \uc704\uc7a5\ud558\uace0 \uae30\uc874 \ubcf4\uc548 \uc870\uce58\uc5d0 \uc758\ud55c \ud0d0\uc9c0\ub97c \ud53c\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ub2e4\uc7ac:<\/strong> \uc6f9 \uc178\uc740 \uc190\uc0c1\ub41c \uc2dc\uc2a4\ud15c\uc758 \ud2b9\uc815 \ud2b9\uc131\uc5d0 \ub9de\uac8c \uc870\uc815\ub420 \uc218 \uc788\uc73c\ubbc0\ub85c \uc801\uc751\ub825\uc774 \ub6f0\uc5b4\ub098\uace0 \uc2dd\ubcc4\ud558\uae30 \uc5b4\ub835\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uace0\uc9d1:<\/strong> \ub9ce\uc740 \uc6f9 \uc178\uc740 \ubc31\ub3c4\uc5b4\ub97c \uc0dd\uc131\ud558\uc5ec \ucd08\uae30 \uc9c4\uc785\uc810\uc774 \uc548\uc804\ud558\ub354\ub77c\ub3c4 \uacf5\uaca9\uc790\uac00 \uc561\uc138\uc2a4\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\ub3c4\ub85d \ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc624\ud1a0\uba54\uc774\uc158:<\/strong> \uace0\uae09 \uc6f9 \uc178\uc740 \uc815\ucc30, \ub370\uc774\ud130 \uc720\ucd9c, \uad8c\ud55c \uc0c1\uc2b9 \ub4f1 \ub2e4\uc591\ud55c \uc791\uc5c5\uc744 \uc790\ub3d9\ud654\ud558\uc5ec \uc2e0\uc18d\ud558\uace0 \ud655\uc7a5 \uac00\ub2a5\ud55c \uacf5\uaca9\uc744 \uac00\ub2a5\ud558\uac8c \ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc6f9 \uc178\uc758 \uc885\ub958<\/h2>\n<p>\uc6f9 \uc178\uc740 \ud504\ub85c\uadf8\ub798\ubc0d \uc5b8\uc5b4, \ub3d9\uc791, \ud45c\uc2dc\ub418\ub294 \uae30\ub2a5\uc744 \ube44\ub86f\ud55c \ub2e4\uc591\ud55c \uae30\uc900\uc5d0 \ub530\ub77c \ubd84\ub958\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uba87 \uac00\uc9c0 \uc77c\ubc18\uc801\uc778 \uc720\ud615\uc758 \uc6f9 \uc178\uc785\ub2c8\ub2e4.<\/p>\n<table>\n<thead>\n<tr>\n<th><strong>\uc720\ud615<\/strong><\/th>\n<th><strong>\uc124\uba85<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>PHP \uc6f9 \uc178<\/strong><\/td>\n<td>PHP\ub85c \uc791\uc131\ub418\uc5c8\uc73c\uba70 \uc6f9 \uac1c\ubc1c\uc5d0\uc11c\uc758 \uc778\uae30\ub85c \uc778\ud574 \uac00\uc7a5 \uc77c\ubc18\uc801\uc73c\ub85c \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc608\ub85c\ub294 WSO, C99 \ubc0f R57\uc774 \uc788\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>ASP \uc6f9 \uc178<\/strong><\/td>\n<td>ASP(Active Server Pages)\uc5d0\uc11c \uac1c\ubc1c\ub418\uc5c8\uc73c\uba70 Windows \uae30\ubc18 \uc6f9 \uc11c\ubc84\uc5d0\uc11c \ud754\ud788 \ubc1c\uacac\ub429\ub2c8\ub2e4. \uc608\ub85c\ub294 ASPXSpy \ubc0f CMDASP\uac00 \uc788\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>Python \uc6f9 \uc178<\/strong><\/td>\n<td>Python\uc73c\ub85c \uac1c\ubc1c\ub418\uc5c8\uc73c\uba70 \ub2e4\uc591\uc131\uacfc \uc0ac\uc6a9 \ud3b8\uc758\uc131 \ub54c\ubb38\uc5d0 \uc790\uc8fc \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc608\ub85c\ub294 Weevely \ubc0f PwnShell\uc774 \uc788\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>JSP \uc6f9 \uc258<\/strong><\/td>\n<td>JSP(JavaServer Pages)\ub85c \uc791\uc131\ub418\uc5c8\uc73c\uba70 \uc8fc\ub85c Java \uae30\ubc18 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ub300\uc0c1\uc73c\ub85c \ud569\ub2c8\ub2e4. \uc608\ub85c\ub294 JSPWebShell \ubc0f AntSword\uac00 \uc788\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>ASP.NET \uc6f9 \uc178<\/strong><\/td>\n<td>ASP.NET \uc751\uc6a9 \ud504\ub85c\uadf8\ub7a8 \ubc0f Windows \ud658\uacbd\uc744 \uc704\ud574 \ud2b9\ubcc4\ud788 \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uba74 China Chopper\uc640 ASPXShell\uc774 \uc788\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Web Shell \uc0ac\uc6a9\ubc29\ubc95, \uc0ac\uc6a9\uc5d0 \ub530\ub978 \ubb38\uc81c\uc810 \ubc0f \ud574\uacb0\ubc29\ubc95<\/h2>\n<h3>\uc6f9 \uc178\uc744 \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95<\/h3>\n<p>\uc6f9 \uc178\uc758 \ubd88\ubc95 \uc0ac\uc6a9\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \uc11c\ubc84\uc758 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud558\ub294 \ub370 \uc911\uc810\uc744 \ub450\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uacf5\uaca9\uc790\ub294 \uc5ec\ub7ec \uac00\uc9c0 \ubc29\ubc95\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc6f9 \uc178\uc744 \ubc30\ud3ec\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>RFI(\uc6d0\uaca9 \ud30c\uc77c \ud3ec\ud568):<\/strong> \uacf5\uaca9\uc790\ub294 \uc548\uc804\ud558\uc9c0 \uc54a\uc740 \ud30c\uc77c \ud3ec\ud568 \uba54\ucee4\ub2c8\uc998\uc744 \uc774\uc6a9\ud558\uc5ec \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \uc545\uc131 \ucf54\ub4dc\ub97c \uc0bd\uc785\ud558\uc5ec \uc6f9 \uc178\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ub85c\uceec \ud30c\uc77c \ud3ec\ud568(LFI):<\/strong> LFI \ucde8\uc57d\uc810\uc73c\ub85c \uc778\ud574 \uacf5\uaca9\uc790\uac00 \uc11c\ubc84\uc758 \ud30c\uc77c\uc744 \uc77d\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc911\uc694\ud55c \uad6c\uc131 \ud30c\uc77c\uc5d0 \uc561\uc138\uc2a4\ud560 \uc218 \uc788\uc73c\uba74 \uc6f9 \uc178\uc744 \uc2e4\ud589\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud30c\uc77c \uc5c5\ub85c\ub4dc \ucde8\uc57d\uc810:<\/strong> \uc57d\ud55c \ud30c\uc77c \uc5c5\ub85c\ub4dc \uac80\uc0ac\ub97c \ud1b5\ud574 \uacf5\uaca9\uc790\ub294 \ubb34\uace0\ud55c \ud30c\uc77c\ub85c \uc704\uc7a5\ud55c \uc6f9 \uc178 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc5c5\ub85c\ub4dc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>SQL \uc8fc\uc785:<\/strong> \uacbd\uc6b0\uc5d0 \ub530\ub77c SQL \uc8fc\uc785 \ucde8\uc57d\uc810\uc73c\ub85c \uc778\ud574 \uc11c\ubc84\uc5d0\uc11c \uc6f9 \uc178\uc774 \uc2e4\ud589\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h3>Web Shell \uc0ac\uc6a9\uacfc \uad00\ub828\ub41c \ubb38\uc81c\uc810 \ubc0f \ud574\uacb0\ubc29\ubc95<\/h3>\n<p>\uc11c\ubc84\uc5d0 \uc6f9 \uc178\uc774 \uc788\uc73c\uba74 \uacf5\uaca9\uc790\uc5d0\uac8c \uc911\uc694\ud55c \ub370\uc774\ud130\uc5d0 \ub300\ud55c \uc644\uc804\ud55c \uc81c\uc5b4 \ubc0f \uc561\uc138\uc2a4 \uad8c\ud55c\uc774 \ubd80\uc5ec\ub420 \uc218 \uc788\uc73c\ubbc0\ub85c \uc2ec\uac01\ud55c \ubcf4\uc548 \uc704\ud5d8\uc774 \ubc1c\uc0dd\ud569\ub2c8\ub2e4. \uc774\ub7ec\ud55c \uc704\ud5d8\uc744 \uc644\ud654\ud558\ub824\uba74 \ub2e4\uc591\ud55c \ubcf4\uc548 \uc870\uce58\ub97c \uad6c\ud604\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc815\uae30 \ucf54\ub4dc \uac10\uc0ac:<\/strong> \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ucf54\ub4dc\ub97c \uc815\uae30\uc801\uc73c\ub85c \uac10\uc0ac\ud558\uc5ec \uc6f9 \uc178 \uacf5\uaca9\uc73c\ub85c \uc774\uc5b4\uc9c8 \uc218 \uc788\ub294 \uc7a0\uc7ac\uc801\uc778 \ucde8\uc57d\uc810\uc744 \uc2dd\ubcc4\ud558\uace0 \uc218\uc815\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ubcf4\uc548 \ud328\uce58:<\/strong> \uc54c\ub824\uc9c4 \ucde8\uc57d\uc810\uc744 \ud574\uacb0\ud558\ub824\uba74 \uc6f9 \uc11c\ubc84 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc0f \ud504\ub808\uc784\uc6cc\ud06c\ub97c \ud3ec\ud568\ud55c \ubaa8\ub4e0 \uc18c\ud504\ud2b8\uc6e8\uc5b4\ub97c \ucd5c\uc2e0 \ubcf4\uc548 \ud328\uce58\ub85c \ucd5c\uc2e0 \uc0c1\ud0dc\ub85c \uc720\uc9c0\ud558\uc138\uc694.<\/p>\n<\/li>\n<li>\n<p><strong>\uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc29\ud654\ubcbd(WAF):<\/strong> \uc545\uc758\uc801\uc778 HTTP \uc694\uccad\uc744 \ud544\ud130\ub9c1 \ubc0f \ucc28\ub2e8\ud558\ub294 WAF\ub97c \uad6c\ud604\ud558\uc5ec \uc6f9 \uc178 \uc545\uc6a9\uc744 \ubc29\uc9c0\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ucd5c\uc18c \uad8c\ud55c \uc6d0\uce59:<\/strong> \uc7a0\uc7ac\uc801\uc778 \uc6f9 \uc178 \uc190\uc0c1\uc758 \uc601\ud5a5\uc744 \ucd5c\uc18c\ud654\ud558\ub824\uba74 \uc11c\ubc84\uc5d0 \ub300\ud55c \uc0ac\uc6a9\uc790 \uad8c\ud55c\uc744 \uc81c\ud55c\ud558\uc138\uc694.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc8fc\uc694 \ud2b9\uc9d5 \ubc0f \uae30\ud0c0 \uc720\uc0ac \uc6a9\uc5b4\uc640\uc758 \ube44\uad50<\/h2>\n<p>\uc720\uc0ac\ud55c \uc6a9\uc5b4\ub85c \uc6f9 \uc178\uc744 \ube44\uad50\ud558\uace0 \uc8fc\uc694 \ud2b9\uc9d5\uc744 \uc774\ud574\ud574 \ubcf4\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n<table>\n<thead>\n<tr>\n<th><strong>\uc6a9\uc5b4<\/strong><\/th>\n<th><strong>\uc124\uba85<\/strong><\/th>\n<th><strong>\ucc28\uc774\uc810<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\uc6f9 \uc178<\/strong><\/td>\n<td>\uc11c\ubc84\uc5d0 \ub300\ud55c \ubb34\ub2e8 \uc561\uc138\uc2a4\ub97c \ud5c8\uc6a9\ud558\ub294 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\uc785\ub2c8\ub2e4.<\/td>\n<td>\uc6f9 \uc178\uc740 \uc6f9 \uc11c\ubc84 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud558\uace0 \uacf5\uaca9\uc790\uc5d0\uac8c \uc6d0\uaca9 \uc561\uc138\uc2a4 \ubc0f \uc81c\uc5b4 \uae30\ub2a5\uc744 \uc81c\uacf5\ud558\ub3c4\ub85d \ud2b9\ubcc4\ud788 \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>\uc6d0\uaca9 \uc561\uc138\uc2a4 \ud2b8\ub85c\uc774 \ubaa9\ub9c8(RAT)<\/strong><\/td>\n<td>\ubb34\ub2e8 \uc6d0\uaca9 \uc561\uc138\uc2a4\ub97c \uc704\ud574 \uc124\uacc4\ub41c \uc545\uc131 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uc785\ub2c8\ub2e4.<\/td>\n<td>RAT\ub294 \ub3c5\ub9bd\ud615 \uc545\uc131\ucf54\ub4dc\uc778 \ubc18\uba74, \uc6f9 \uc178\uc740 \uc6f9 \uc11c\ubc84\uc5d0 \uc0c1\uc8fc\ud558\ub294 \uc2a4\ud06c\ub9bd\ud2b8\uc785\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>\ub4b7\ubb38<\/strong><\/td>\n<td>\ubb34\ub2e8 \uc561\uc138\uc2a4\ub97c \uc704\ud574 \uc2dc\uc2a4\ud15c\uc5d0 \uc228\uaca8\uc9c4 \uc9c4\uc785\uc810\uc785\ub2c8\ub2e4.<\/td>\n<td>\uc6f9 \uc178\uc740 \uc885\uc885 \ubc31\ub3c4\uc5b4 \uc5ed\ud560\uc744 \ud558\uc5ec \uc190\uc0c1\ub41c \uc11c\ubc84\uc5d0 \ub300\ud55c \ube44\ubc00 \uc561\uc138\uc2a4\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td><strong>\ub8e8\ud2b8\ud0b7<\/strong><\/td>\n<td>\uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc545\uc758\uc801\uc778 \ud65c\ub3d9\uc744 \uc228\uae30\ub294 \ub370 \uc0ac\uc6a9\ub418\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uc785\ub2c8\ub2e4.<\/td>\n<td>\ub8e8\ud2b8\ud0b7\uc740 \ub9ec\uc6e8\uc5b4\uc758 \uc874\uc7ac\ub97c \uc228\uae30\ub294 \ub370 \uc911\uc810\uc744 \ub450\ub294 \ubc18\uba74, \uc6f9 \uc178\uc740 \uc6d0\uaca9 \uc81c\uc5b4 \ubc0f \uc870\uc791\uc744 \uac00\ub2a5\ud558\uac8c \ud558\ub294 \ub370 \uc911\uc810\uc744 \ub461\ub2c8\ub2e4.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Web Shell\uacfc \uad00\ub828\ub41c \ubbf8\ub798\uc758 \uad00\uc810\uacfc \uae30\uc220<\/h2>\n<p>\uae30\uc220\uc774 \ubc1c\uc804\ud568\uc5d0 \ub530\ub77c \uc6f9 \uc178\uc740 \uc9c4\ud654\ud558\uc5ec \ub354\uc6b1 \uc815\uad50\ud574\uc9c0\uace0 \uac10\uc9c0\ud558\uae30\uac00 \uc5b4\ub824\uc6cc\uc9c8 \uac00\ub2a5\uc131\uc774 \ub192\uc2b5\ub2c8\ub2e4. \uc7a0\uc7ac\uc801\uc778 \ubbf8\ub798 \ub3d9\ud5a5\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>AI \uae30\ubc18 \uc6f9 \uc178:<\/strong> \uc0ac\uc774\ubc84 \ubc94\uc8c4\uc790\ub294 \uc778\uacf5 \uc9c0\ub2a5\uc744 \uc0ac\uc6a9\ud558\uc5ec \ub354\uc6b1 \ub3d9\uc801\uc774\uace0 \ud68c\ud53c\uc801\uc778 \uc6f9 \uc178\uc744 \ub9cc\ub4e4\uc5b4 \uc0ac\uc774\ubc84 \ubcf4\uc548 \ubc29\uc5b4\uc758 \ubcf5\uc7a1\uc131\uc744 \ub192\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ube14\ub85d\uccb4\uc778 \ubcf4\uc548:<\/strong> \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \uc11c\ubc84\uc5d0 \ube14\ub85d\uccb4\uc778 \uae30\uc220\uc744 \ud1b5\ud569\ud558\uba74 \ubcf4\uc548\uc744 \uac15\ud654\ud558\uace0 \ubb34\ub2e8 \uc561\uc138\uc2a4\ub97c \ubc29\uc9c0\ud560 \uc218 \uc788\uc5b4 \uc6f9 \uc178\uc774 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud558\uae30\uac00 \ub354 \uc5b4\ub824\uc6cc\uc9d1\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc81c\ub85c \ud2b8\ub7ec\uc2a4\ud2b8 \uc544\ud0a4\ud14d\ucc98:<\/strong> \uc81c\ub85c \ud2b8\ub7ec\uc2a4\ud2b8 \uc6d0\uce59\uc744 \ucc44\ud0dd\ud558\uba74 \uc5c4\uaca9\ud55c \uc561\uc138\uc2a4 \uc81c\uc5b4\ub97c \uc2dc\ud589\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uc7a5\uce58\uc5d0 \ub300\ud55c \uc9c0\uc18d\uc801\uc778 \uac80\uc99d\uc744 \uc2e4\uc2dc\ud558\uc5ec \uc6f9 \uc178 \uacf5\uaca9\uc758 \uc601\ud5a5\uc744 \uc81c\ud55c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc11c\ubc84\ub9ac\uc2a4 \uc544\ud0a4\ud14d\ucc98:<\/strong> \uc11c\ubc84\ub9ac\uc2a4 \ucef4\ud4e8\ud305\uc740 \uc11c\ubc84 \uad00\ub9ac \ucc45\uc784\uc744 \ud074\ub77c\uc6b0\ub4dc \uacf5\uae09\uc790\uc5d0\uac8c \uc774\uc804\ud568\uc73c\ub85c\uc368 \uc7a0\uc7ac\uc801\uc73c\ub85c \uacf5\uaca9 \ud45c\uba74\uc744 \uc904\uc774\uace0 \uc6f9 \uc178 \ucde8\uc57d\uc810\uc758 \uc704\ud5d8\uc744 \ucd5c\uc18c\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \uc0ac\uc6a9\ud558\uac70\ub098 \uc6f9 \uc178\uacfc \uc5f0\uacb0\ud558\ub294 \ubc29\ubc95<\/h2>\n<p>OneProxy(oneproxy.pro)\uc5d0\uc11c \uc81c\uacf5\ud558\ub294 \uac83\uacfc \uac19\uc740 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc6f9 \uc178 \uacf5\uaca9\uc744 \uc644\ud654\ud558\uace0 \ucd09\uc9c4\ud558\ub294 \ub370 \uc911\uc694\ud55c \uc5ed\ud560\uc744 \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h3>\uc6f9 \uc178 \uacf5\uaca9 \uc644\ud654:<\/h3>\n<ol>\n<li>\n<p><strong>\uc775\uba85:<\/strong> \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc6f9\uc0ac\uc774\ud2b8 \uc18c\uc720\uc790\uc5d0\uac8c \uc775\uba85\uc131 \uacc4\uce35\uc744 \uc81c\uacf5\ud558\uc5ec \uacf5\uaca9\uc790\uac00 \uc2e4\uc81c \uc11c\ubc84 IP \uc8fc\uc18c\ub97c \uc815\ud655\ud788 \ucc3e\uc544\ub0b4\uae30 \uc5b4\ub835\uac8c \ub9cc\ub4ed\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud2b8\ub798\ud53d \ud544\ud130\ub9c1:<\/strong> \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc29\ud654\ubcbd\uc774 \uc7a5\ucc29\ub41c \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc545\uc131 \ud2b8\ub798\ud53d\uc744 \ud544\ud130\ub9c1\ud558\uace0 \uc6f9 \uc178 \uc545\uc6a9\uc744 \ubc29\uc9c0\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc554\ud638\ud654:<\/strong> \ud504\ub85d\uc2dc\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8\uc640 \uc11c\ubc84 \uac04\uc758 \ud2b8\ub798\ud53d\uc744 \uc554\ud638\ud654\ud558\uc5ec \ud2b9\ud788 \uc6f9 \uc178 \ud1b5\uc2e0 \uc911\uc5d0 \ub370\uc774\ud130 \uac00\ub85c\ucc44\uae30 \uc704\ud5d8\uc744 \uc904\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h3>\uc6f9 \uc178 \uacf5\uaca9 \ucd09\uc9c4:<\/h3>\n<ol>\n<li>\n<p><strong>\uacf5\uaca9\uc790 \uc775\uba85\ud654:<\/strong> \uacf5\uaca9\uc790\ub294 \uc6f9 \uc178\uc744 \ubc30\ud3ec\ud558\ub294 \ub3d9\uc548 \ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc2e4\uc81c \uc2e0\uc6d0\uacfc \uc704\uce58\ub97c \uc228\uaca8 \ucd94\uc801\uc744 \uc5b4\ub835\uac8c \ub9cc\ub4e4 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc6b0\ud68c \uc81c\ud55c\uc0ac\ud56d:<\/strong> \uc77c\ubd80 \uacf5\uaca9\uc790\ub294 \ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \ud65c\uc6a9\ud558\uc5ec IP \uae30\ubc18 \uc561\uc138\uc2a4 \uc81c\uc5b4 \ubc0f \uae30\ud0c0 \ubcf4\uc548 \uc870\uce58\ub97c \uc6b0\ud68c\ud558\uc5ec \uc6f9 \uc178 \ubc30\ud3ec\ub97c \uc6a9\uc774\ud558\uac8c \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uad00\ub828\ub41c \ub9c1\ud06c\ub4e4<\/h2>\n<p>\uc6f9 \uc178 \ubc0f \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubcf4\uc548\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc744 \ubcf4\ub824\uba74 \ub2e4\uc74c \ub9ac\uc18c\uc2a4\ub97c \ud0d0\uc0c9\ud558\uc138\uc694.<\/p>\n<ol>\n<li><a href=\"https:\/\/owasp.org\/www-community\/Web-Shell\" target=\"_new\" rel=\"noopener nofollow\">OWASP \uc6f9\uc258 \ubcf4\uc548<\/a><\/li>\n<li><a href=\"https:\/\/www.us-cert.gov\/ncas\/alerts\/TA15-314A\" target=\"_new\" rel=\"noopener nofollow\">US-CERT \uc6f9 \uc178 \uac1c\uc694<\/a><\/li>\n<li><a href=\"https:\/\/unit42.paloaltonetworks.com\/web-shells-attackers-best-friend\/\" target=\"_new\" rel=\"noopener nofollow\">\uc6f9 \uc178: \uacf5\uaca9\uc790\uc758 \uac00\uc7a5 \uce5c\ud55c \uce5c\uad6c<\/a><\/li>\n<\/ol>\n<p>\uacb0\ub860\uc801\uc73c\ub85c, \uc6f9 \uc178\uc740 \uc6f9 \uc11c\ubc84\uc640 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc2ec\uac01\ud55c \uc704\ud611\uc744 \uac00\ud558\uace0 \uc788\uc73c\uba70, \uc6f9 \uc178\uc758 \uc9c4\ud654\ub294 \uc0ac\uc774\ubc84 \ubcf4\uc548 \uc804\ubb38\uac00\uc5d0\uac8c \uacc4\uc18d \ub3c4\uc804\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. OneProxy(oneproxy.pro)\uc640 \uac19\uc740 \ud504\ub85d\uc2dc \uc11c\ubc84 \uc81c\uacf5\uc5c5\uccb4\uac00 \uc11c\ube44\uc2a4\uc758 \ubcf4\uc548\uacfc \ubb34\uacb0\uc131\uc744 \ubcf4\uc7a5\ud558\uace0 \uc7a0\uc7ac\uc801\uc778 \uc0ac\uc774\ubc84 \uacf5\uaca9\uc73c\ub85c\ubd80\ud130 \ud074\ub77c\uc774\uc5b8\ud2b8\ub97c \ubcf4\ud638\ud558\ub824\uba74 \uc6f9 \uc178\uacfc \uad00\ub828\ub41c \uc720\ud615, \uae30\ub2a5 \ubc0f \uc7a0\uc7ac\uc801 \uc644\ud654 \ubc29\ubc95\uc744 \uc774\ud574\ud558\ub294 \uac83\uc774 \ud544\uc218\uc801\uc785\ub2c8\ub2e4. \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubcf4\uc548\uc744 \uac1c\uc120\ud558\uace0 \uc0ac\uc774\ubc84 \ubcf4\uc548\uc758 \ucd5c\uc2e0 \ubc1c\uc804 \uc0ac\ud56d\uc744 \ucd5c\uc2e0 \uc0c1\ud0dc\ub85c \uc720\uc9c0\ud558\ub824\ub294 \uc9c0\uc18d\uc801\uc778 \ub178\ub825\uc740 \uc6f9 \uc178\uc758 \uc704\ud611\uc5d0 \ub9de\uc11c \uc2f8\uc6b0\uace0 \uc628\ub77c\uc778 \uc0dd\ud0dc\uacc4\ub97c \ubcf4\ud638\ud558\ub294 \ub370 \uc911\uc694\ud55c \uc5ed\ud560\uc744 \ud560 \uac83\uc785\ub2c8\ub2e4.<\/p>","protected":false},"featured_media":479648,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-479647","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Web Shell: A Comprehensive Overview<\/mark>","faq_items":[{"question":"What is a Web shell?","answer":"<p>A Web shell is a malicious script or program cybercriminals use to gain unauthorized access and control over web servers. It provides attackers with a remote command-line interface, enabling them to manipulate the server and carry out malicious activities.<\/p>"},{"question":"How did Web shells originate?","answer":"<p>Web shells first emerged in the late 1990s as tools for legitimate remote server management. However, cybercriminals soon recognized their potential for illegal activities. The first known mentions of Web shells in criminal contexts date back to the early 2000s on hacking forums.<\/p>"},{"question":"How does a Web shell work?","answer":"<p>Web shells exploit vulnerabilities in web applications or servers to gain entry. Once deployed, they grant attackers remote access and control. Web shells have a web-based interface for communication, enabling attackers to execute commands and steal data.<\/p>"},{"question":"What are the key features of Web shells?","answer":"<p>Web shells are stealthy, versatile, and can create backdoors for persistent access. They offer automation for various tasks, making them powerful tools for cybercriminals.<\/p>"},{"question":"What are the different types of Web shells?","answer":"<p>Web shells come in various types based on the programming language used:<\/p><ul><li>PHP Web Shells<\/li><li>ASP Web Shells<\/li><li>Python Web Shells<\/li><li>JSP Web Shells<\/li><li>ASP.NET Web Shells<\/li><\/ul>"},{"question":"How can Web shells be used, and what are the related problems and solutions?","answer":"<p>Web shells are deployed through various methods, such as Remote File Inclusion (RFI) or SQL Injection. To mitigate risks, regular code audits, security patching, and implementing Web Application Firewalls (WAF) are recommended.<\/p>"},{"question":"How do Web shells compare to similar terms like RATs, Backdoors, and Rootkits?","answer":"<p>Web shells specifically target web servers, whereas RATs are standalone malware for remote access. Backdoors create hidden access points, and rootkits focus on concealing malicious activities.<\/p>"},{"question":"What are the future perspectives and technologies related to Web shells?","answer":"<p>In the future, AI-powered web shells, blockchain security, Zero Trust Architecture, and serverless architectures are likely to impact web shell development and detection.<\/p>"},{"question":"How can proxy servers be associated with Web shells?","answer":"<p>Proxy servers like OneProxy (oneproxy.pro) can both mitigate and facilitate web shell attacks. They offer anonymity and traffic filtering to protect against attacks but may also be used to anonymize attackers and bypass restrictions.<\/p>"},{"question":"Where can I find more information about Web shells and web application security?","answer":"<p>For more information about Web shells and web application security, you can explore the following resources:<\/p><ol><li><a href=\"https:\/\/owasp.org\/www-community\/Web-Shell\" target=\"_new\">OWASP Web Shell Security<\/a><\/li><li><a href=\"https:\/\/www.us-cert.gov\/ncas\/alerts\/TA15-314A\" target=\"_new\">US-CERT Web Shell Overview<\/a><\/li><li><a href=\"https:\/\/unit42.paloaltonetworks.com\/web-shells-attackers-best-friend\/\" target=\"_new\">Web Shells: Attacker's Best Friend<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/479647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/479647\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media\/479648"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media?parent=479647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}