New PHP Backdoor and Reverse Shell Tools Discovered

Two new exploits, ShellStack and gimmeSH, have emerged targeting web servers and terminal environments. ShellStack is a PHP-based backdoor management tool that allows hackers to track compromised sites by uploading backdoor scripts. gimmeSH creates custom cheat sheets for reverse shells and file transfers, enabling attackers to easily execute commands on compromised systems. Both tools are designed for use by cybercriminals and can facilitate unauthorized access to systems. The impact is significant as these tools can be used to exploit vulnerable web applications and terminal environments. Current status indicates these tools are available for download and may be actively used in cyber attacks. Security professionals are advised to monitor for these tools in their environments.

Key Points: • ShellStack allows hackers to manage PHP-based backdoors efficiently. • gimmeSH creates custom scripts for reverse shell access and file transfers. • Both tools pose significant risks to web servers and terminal environments.