What is a web-based script that provides access to a web server for attackers?

What is a web-based script that provides access to a web server for attackers?

• A. InSpectre
• B. Web Shell
• C. Launch Daemon
• D. Sudo

Answer: (B)

A web shell is a web-accessible backdoor script that an attacker places on a compromised web server to gain remote control. Once uploaded in a web language like PHP, ASP, or JSP, it provides a command-line interface and file-management capabilities through a browser, allowing the attacker to run commands, upload or download files, and maneuver within the server environment from anywhere via HTTP. This exact setup—a script on the web server that gives ongoing access for control and exploration—makes it the best match for the description. Other options don’t fit that role. A Launch Daemon is simply a background service on macOS that starts at boot, not a tool an attacker uses to access a web server. Sudo is a privilege-elevation command on Unix-like systems, not a web-based backdoor. InSpectre relates to detecting or exploiting the Spectre vulnerability, not providing ongoing web-based access to a server.

A web shell is a web-accessible backdoor script that an attacker places on a compromised web server to gain remote control. Once uploaded in a web language like PHP, ASP, or JSP, it provides a command-line interface and file-management capabilities through a browser, allowing the attacker to run commands, upload or download files, and maneuver within the server environment from anywhere via HTTP. This exact setup—a script on the web server that gives ongoing access for control and exploration—makes it the best match for the description.

Other options don’t fit that role. A Launch Daemon is simply a background service on macOS that starts at boot, not a tool an attacker uses to access a web server. Sudo is a privilege-elevation command on Unix-like systems, not a web-based backdoor. InSpectre relates to detecting or exploiting the Spectre vulnerability, not providing ongoing web-based access to a server.