How does this skill help with bug bounty programs?

It provides standardized payloads that can be used to demonstrate Impact during authorized testing within a program's defined scope.

Can I use these files on live production servers?

No. These files should only be used in isolated lab environments or during authorized security assessments where you have explicit permission.

What programming languages are covered in this collection?

The skill includes web shell samples for PHP, ASP, ASPX, JSP, Python, and Perl.

Is this skill intended for defensive or offensive use?

While it contains shell samples, its primary purpose is defensive: testing detection systems, validating security monitoring, and conducting forensic research.

SecLists Web-Shells

Name: SecLists Web-Shells
Author: Eyadkelleh

byEyadkelleh

0•

Seguridad y Pruebas

Provides a comprehensive library of web shell samples across multiple languages for security research and detection validation.

This skill integrates the industry-standard SecLists Web-Shells collection into Claude Code, offering a curated repository of PHP, ASP/ASPX, JSP, Python, and Perl shell samples. It is specifically designed for security professionals and researchers to test the efficacy of IDS/IPS signatures, validate web application firewalls (WAF), and conduct forensic analysis. By providing structured access to diverse web shell patterns, it enables efficient security monitoring validation and malware research in controlled, authorized environments.

Características Principales

01Structured payloads for malware analysis and forensics

02Quick access to common and advanced shell variants

03Curated patterns from the authoritative SecLists repository

04Optimized for detection system and signature testing

05Multi-language support including PHP, ASPX, JSP, Python, and Perl

060 GitHub stars

Casos de Uso

01Conducting security research and malware behavior analysis

02Developing and testing custom detection signatures for SOC teams

03Validating the detection capabilities of WAF, IDS, and IPS systems

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add eyadkelleh/awesome-claude-skills-security web-shells

For use in Claude.ai and ChatGPT

Download Skill