What term describes a malicious script installed on a target server to grant remote control?

What term describes a malicious script installed on a target server to grant remote control?

• A. Web Shell
• B. Backdoor
• C. Trojan
• D. Rootkit

Answer: (A)

A web shell is a malicious script placed on a web server that exposes a command interface over the web, giving an attacker remote control of the server. It typically runs with the server’s privileges and allows you to issue commands, upload or download files, and pivot to other systems through HTTP(S). This directly fits the scenario of a script installed on the target server that grants remote control, especially since it is designed to be accessed and controlled remotely via the web. While a backdoor refers to any hidden entry point for access, a Trojan is malware that hides behind legitimate-looking software, and a rootkit is a tool used to conceal attacker activity. The description specifically points to a script-based remote-control mechanism on a web server, which is the hallmark of a web shell.

A web shell is a malicious script placed on a web server that exposes a command interface over the web, giving an attacker remote control of the server. It typically runs with the server’s privileges and allows you to issue commands, upload or download files, and pivot to other systems through HTTP(S). This directly fits the scenario of a script installed on the target server that grants remote control, especially since it is designed to be accessed and controlled remotely via the web.

While a backdoor refers to any hidden entry point for access, a Trojan is malware that hides behind legitimate-looking software, and a rootkit is a tool used to conceal attacker activity. The description specifically points to a script-based remote-control mechanism on a web server, which is the hallmark of a web shell.