isc.sans.edu 6/22/2026, 3:40:53 PM · external

Webshells Remain Popular, (Mon, Jun 22nd)

Webshells Remain Popular, (Mon, Jun 22nd)
CyberSIXT Evidence Panel
Primary Source github.com

THE article discusses the ongoing popularity of webshells, particularly a new variant called ZypeerShell. This webshell, claimed to be 'the most powerful, undetectable, and feature-rich PHP webshell' is available on GitHub. The author, Xavier Mertens, notes that ZypeerShell offers traditional webshell capabilities and includes a function intended for connecting to a command-and-control server, though it is not activated in the version examined.

The repository also has an obfuscated version and ZypeerShell is mentioned on a Telegram channel as a red-team tool. The entry emphasizes the persistent issue of webshells in cybersecurity.

View Primary Source Via isc.sans.edu

Article by CyberSIXT