Which tool is used to develop a backdoor shell and upload it to a target server to gain remote shell access, enabling persistence and spreading backdoors?

Which tool is used to develop a backdoor shell and upload it to a target server to gain remote shell access, enabling persistence and spreading backdoors?

• A. Web Shell
• B. b374k
• C. Web Shell Detector
• D. Weevely

Answer: (D)

The main idea being tested is the use of a tool that creates a backdoor payload and then deploys it to a target so you can obtain a remote shell and maintain access. Weevely fits this precisely: it’s a framework that lets you generate a backdoor shell payload (a PHP web shell) and upload it to a compromised server. Once in place, you can connect back to the server to issue commands, and you can extend control—often by dropping additional payloads or shells to keep persistence and enable spreading to other systems. This combination of payload generation, deployment, remote control, and ongoing access is what makes Weevely the best match for this scenario. The other options don’t fit as well. A web shell is a general term for any shell you access over the web, not a tool for generating and deploying backdoors. The b374k option is a specific web shell you upload and use, but it isn’t a generator/manager for creating backdoors. Web Shell Detector is a defensive tool used to find web shells, not to create or deploy them.

The main idea being tested is the use of a tool that creates a backdoor payload and then deploys it to a target so you can obtain a remote shell and maintain access. Weevely fits this precisely: it’s a framework that lets you generate a backdoor shell payload (a PHP web shell) and upload it to a compromised server. Once in place, you can connect back to the server to issue commands, and you can extend control—often by dropping additional payloads or shells to keep persistence and enable spreading to other systems. This combination of payload generation, deployment, remote control, and ongoing access is what makes Weevely the best match for this scenario.

The other options don’t fit as well. A web shell is a general term for any shell you access over the web, not a tool for generating and deploying backdoors. The b374k option is a specific web shell you upload and use, but it isn’t a generator/manager for creating backdoors. Web Shell Detector is a defensive tool used to find web shells, not to create or deploy them.