Flying Under the Radar: Hiding Web Shells From Web Application Firewall

SANS PenTest HackFest 2022

Speaker: Manish Tanwar, Security Consultant, MDSec Consulting

Web shell access and it's importance

-----------------------------------

Web applications are integral part of Internet based ecosystem. Organizations uses web applications for varies purposes.

These web applications may be vulnerable to web attack and an attacker can take advantage of it to achieve Remote Code Execution (RCE) on the web server. An attacker who is willing to gain foothold to Organization network, try to exploit web application accessible over internet …

access application applications attack code code execution consultant consulting ecosystem firewall hackfest internet may organizations pentest radar rce remote code remote code execution sans security security consultant server shell shells the web under under the radar vulnerable web web application web application firewall web applications web server web shell