Skip to content
New PHP Backdoor and Reverse Shell Tools Discovered

New PHP Backdoor and Reverse Shell Tools Discovered

First seen 9 Sep 2026, 14:14 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 10, 2026 at 13:46 UTC
  • •ShellStack allows hackers to manage PHP-based backdoors efficiently.
  • •gimmeSH creates custom scripts for reverse shell access and file transfers.
  • •Both tools pose significant risks to web servers and terminal environments.

Two new exploits, ShellStack and gimmeSH, have emerged targeting web servers and terminal environments. ShellStack is a PHP-based backdoor management tool that allows hackers to track compromised sites by uploading backdoor scripts. gimmeSH creates custom cheat sheets for reverse shells and file transfers, enabling attackers to easily execute commands on compromised systems. Both tools are designed for use by cybercriminals and can facilitate unauthorized access to systems. The impact is significant as these tools can be used to exploit vulnerable web applications and terminal environments. Current status indicates these tools are available for download and may be actively used in cyber attacks. Security professionals are advised to monitor for these tools in their environments.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 45d ago How this analysis works

Timeline

2026-09-08
ShellStack exploit published
A new PHP-based backdoor management tool was released, allowing hackers to track compromised sites.
Sploitus
2026-09-09
gimmeSH exploit published
gimmeSH tool launched, enabling the creation of custom scripts for reverse shell and file transfer.
Sploitus

More articles in this cluster (3)

Following this threat?

Track Dhanush Shell in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed