ASP webshell / backdoor source

WEBSHELL_ASP

← All detection heuristics · Webshell

high WEBSHELL_ASP

What it means

The file contains ASP webshell code (eval/Execute over Request input, or WScript.Shell.Run of request data).

Why it fires

Classic ASP server-side remote-command-execution backdoor source — attacker-supplied Request data is passed to eval/Execute or a shell.

Other Webshell heuristics

WEBSHELL_PHP WEBSHELL_JSP WEBSHELL_MARKER