JSP webshell / backdoor source

WEBSHELL_JSP

← All detection heuristics · Webshell

high WEBSHELL_JSP

What it means

The file contains JSP webshell code (Runtime.exec / ProcessBuilder driven by a request parameter).

Why it fires

JSP server-side remote-command-execution backdoor source — a request parameter is passed to Runtime.exec / ProcessBuilder to run commands.

Other Webshell heuristics

WEBSHELL_PHP WEBSHELL_ASP WEBSHELL_MARKER