How web shells get planted
How web shells get planted: vulnerability classes
A conceptual map of the vulnerability classes that let attackers drop web shells — file uploads, RCE, file-write primitives, stolen admin access and more — with the defensive control for each.