Terms of Service

Last updated: September 2026.

By using WebShells, you agree to these terms. Content on this site is provided as-is, without warranties.

Educational, defensive purpose

All content is published to help defenders detect, investigate and remediate web shells on systems they own or are authorised to protect. The site deliberately does not publish web shell source code, deployable payloads or exploit code. Apply the guidance only to systems you are authorised to administer or assess, and test detection rules and configuration changes before using them in production.

Acceptable use

Do not scrape excessively, attempt to disrupt the service, or republish content without attribution.

Trademarks

Product and company names mentioned (for example Microsoft, Apache, Citrix, Progress or Ivanti) are trademarks of their respective owners and are used only to identify the products discussed. WebShells is an independent publication and is not affiliated with or endorsed by any vendor.

Liability

WebShells is not liable for any indirect damages arising from your use of this site.