 |
สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์ Electronic Transactions Development Agency |
|
สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์ Electronic Transactions Development Agency |
Tool: WSO| Names | WSO Webshell by Orb | |
| Category | Tools | |
| Type | Reconnaissance, Backdoor, Info stealer, Credential stealer, Exfiltration | |
| Description | (Wordfence) WSO is a favorite web shell among hackers because of its particularly powerful set of features. • Password protection • Server information disclosure • File management features like uploading, downloading, or editing files, creating directories, browsing through directories, and searching for text in files • Command-line console • Database administration • PHP code execution • Encoding and decoding text input • Brute-force attacks against FTP or database servers • Installation of a Perl script to act as a more direct backdoor on the server | |
| Information | <https://www.wordfence.com/blog/2017/06/wso-shell/> <https://github.com/wso-shell> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/php.wso> | |
Last change to this tool card: 13 May 2020
Download this tool card in JSON format
Previous: WSCSPL
Next: WsTunnel
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Energetic Bear, Dragonfly |  | 2010-Mar 2022 |  | ||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1227 | |
 |
[email protected] | |