Skip to content
WebShells

Area

Eradication & hardening

1 guide in this area. Read them in order or jump to any one.

  1. Eradicating web shells and hardening web servers

    Remove web shells without leaving the intruder a way back, then harden: safe upload handling, no-exec directories for nginx, Apache and IIS, WAF, least privilege and application allow-listing.

All guides in this area