Behinder
- Malware type
- webshell
- Profile updated
- 2026-07-07 13:07:13
Context
A webshell for multiple web languages (asp/aspx, jsp/jspx, php), openly distributed through Github.
Detection coverage
- 1 YARA rules
Detection rules
- VOLEXITY_Webshell_Java_Realcmd (yara-rule)
Reports & references
- elastic.co — Ref2924 Howto Maintain Persistence As An Advanced Threat (report)
- blog.gigamon.com — Investigating Web Shells (report)
- harfanglab.io — Insights Ivanti Csa Exploitation (report)
- malpedia.caad.fkie.fraunhofer.de — Php.Behinder (report)
- cyberandramen.net — A Tale Of Two Shells (report)
- github.com — Behindershell.Md (report)