大佬整理的webshell合集：

https://github.com/tennc/webshell  
各种webshell集合

https://github.com/ysrc/webshell-sample
webshell样本

https://github.com/xl7dev/WebShell
Webshell && Backdoor Collection

https://github.com/tdifg/WebShell
WebShell Collect

https://github.com/fictivekin/webshell
A console-based, JavaScripty HTTP client utility

https://github.com/bartblaze/PHP-backdoors
A collection of PHP backdoors. For educational or testing purposes only.

https://github.com/malwares/WebShell
webshell集合

https://github.com/xypiie/WebShell
web-based shell

https://github.com/testsecer/WebShell
WebShell收集项目

https://github.com/nbs-system/php-malware-finder
Detect potentially malicious PHP files

https://github.com/BlackArch/webshells
Various webshells

https://github.com/tanjiti/webshellSample
webshell sample for webshel check module

https://github.com/dotcppfile/DAws
Advanced Web Shell

https://github.com/theralfbrown/webshell
Web Shell WSO 

https://github.com/gokyle/webshell
A shell for new Go webapps

https://github.com/sunnyelf/cheetah
a very fast brute force webshell password tool 

https://github.com/JohnTroony/php-webshells
Common php webshells

https://github.com/evilcos/python-webshell
python webshell

https://github.com/lhlsec/webshell
webshell集合

https://github.com/shewey/webshell
webshell&poc

https://github.com/boy-hack/WebshellManager
w8ay 一句话WEB端管理工具

https://github.com/liulongfei/web_shell_bopo
一句话木马爆破工具

https://github.com/Ni7eipr/webshell
这是一个webshell收集项目

https://github.com/WangYihang/Webshell-Sniper
PyWebshell

https://github.com/pm2-hive/pm2-webshell
Fully capable Webshell

https://github.com/samdark/yii2-webshell

https://github.com/b1ueb0y/webshell

https://github.com/oneoneplus/webshell
webshell收集与整理

https://github.com/zhaojh329/xterminal
xTerminal is a remote web shell tool for multi terminal devices.

https://github.com/juanparati/Webshell
A remote execution tool (or security intrusion tool)

https://github.com/wofeiwo/webshell-find-tools
分析web访问日志以及web目录文件属性，用于根据查找可疑后门文件的相关脚本。

https://github.com/abcdlzy/webshell-manager

一句话木马管理工具

https://github.com/alert0/webshellch
中国菜刀jsp端

https://github.com/needle-wang/jweevely
a exec jsp shell, simply like weevely php C/S shell.

https://github.com/tengzhangchao/PyCmd

加密隐形一句话木马

https://github.com/0x73686974/WebShell
Stealth WebShell AntiLogging

https://github.com/wonderqs/Blade
A webshell connection tool with customized WAF bypass payloads

https://github.com/le4f/aspexec

asp命令执行webshell

https://github.com/jijinggang/WebShell
Go语言Run predefined shell script through web browser

https://github.com/matiasmenares/Shuffle
WebShell Backdoor Framework

https://github.com/Skycrab/PySpy
https://github.com/huge818/webshell
这是一个网页版本的xshell

https://github.com/gb-sn/go-webshell
A simple webshell written in Go

https://github.com/BlackHole1/Fastener
Web版webshell

https://github.com/blackhalt/WebShells

https://github.com/tomas1000r/webshell

https://github.com/hanzhibin/Webshell
This provide a bash like web tool for Hamsta.

https://github.com/decebel/webShell
commanline web shell UI

https://github.com/Aviso-hub/Webshell
Webshell interface

https://github.com/vnhacker1337/Webshell

webshell合集

https://github.com/bittorrent3389/Webshell
php webshell

https://github.com/anhday22/WebShell
webshell

https://github.com/buxiaomo/webshell
WebShell Web 管理平台

https://github.com/z3robat/webshell
https://github.com/n3oism/webshell
新webshell

https://github.com/uuleaf/WebShell
网站木马

https://github.com/onefor1/webshell
冷门Webshell

https://github.com/cunlin-yu/webshell
Collected some useful webshell from the wide.

https://github.com/roytest1/webshell

https://github.com/backlion/webshell
webshell合集 22天前更新

https://github.com/opetrovski/webshell
https://github.com/opetrovski/webshell
管理工具

https://github.com/gsmlg/webshell

https://github.com/health901/webshell

PHP webshell控制台

https://github.com/inof8r/WebShell
Android Webview wrapper

https://github.com/Najones19746/webShell
pywebshell

https://github.com/RaspiCar/WebShell
C WEBSHELL

https://github.com/health901/webshell
PHP Web Shell 控制台

https://github.com/dinamsky/WebShell
webshell合集

https://github.com/Fay48/WebShell
https://github.com/tuz358/webshell
后门

https://github.com/shajf/Webshell
https://github.com/t17lab/WebShell
Web Shell

https://github.com/blacksunwen/webshell
这是一个webshell收集项目

https://github.com/webshellarchive/webshellco
webshell收集

https://github.com/lolwaleet/Rubshell

ruby shell

https://github.com/WhiteWinterWolf/WhiteWinterWolf-php-webshell
https://github.com/goodtouch/jruby-webshell

https://github.com/maestrano/webshell-server

https://github.com/LuciferoO/webshell-collector

https://github.com/wangeradd1/myWebShell
一些比较冷门或者特殊的webshell脚本、jar包、war包

https://github.com/0xHJK/caidao
中国菜刀

https://github.com/alintamvanz/1945shell
1945 Shell adalah project webshell backdoor yang rilis setiap tahun (17 Agustus). dan rilis build setiap bulan

https://github.com/Venen0/vshell
VenenoShell is a PHP based webshell that let you manage a web server. You can create, modify and delete files on it.

https://github.com/lojikil/tinyshell
super tiny remote webshell with some helpers. Not trying to hide anything, just a simple shell

https://github.com/wso-shell/PHP-SHELL-WSO
https://github.com/meme-lord/PHPShellBackdoors

https://github.com/Learn2Better/51mp3L-Web-Backdoor
PHP WebShell Backdoor for Access all dir/file in the Website. 

https://github.com/yuxiaokui/JBoss-Hack
通过调用zoomeye来获取安装JBoss机器的地址，然后通过HEAD请求植入webshell。

https://github.com/SecurityRiskAdvisors/cmd.jsp
A super small jsp webshell with file upload capabilities.

https://github.com/ddcunningham/crude-shellhunter
Fooling with AWK to remove webshells injected into client code.

https://github.com/stormdark/BackdoorPHP

https://github.com/vduddu/Malware

https://github.com/1oid/BurstPHPshell
破解webshell

https://github.com/gokyle/urlshorten_ng
URL shortening service based on \’webshell\’.

https://github.com/rhelsing/trello_osx
Na(t)ive Trello implementation for OS X, using WebShell

https://github.com/pfrazee/wsh-grammar
WebShell grammer definition, and parser

https://github.com/x-o-r-r-o/PHP-Webshells-Collection
Most Wanted Private and Public PHP Web Shells Can Be Downloaded Here. (Educational Purpose Only)

https://github.com/IHA114/WebShell2

https://github.com/WangYihang/WebShellCracker
https://github.com/KINGSABRI/WebShellConsole

https://github.com/jujinesy/webshells.17.03.18

https://github.com/hackzsd/HandyShells
Some Handy WebShell Scripts

https://github.com/mperlet/pomsky
python web shell

https://github.com/cybernoir/bns-php-shell
Basic and Stealthy PHP webshell

https://github.com/XianThi/rexShell
php backdoor, webshell

https://github.com/H4CK3RT3CH/php-webshells

https://github.com/minisllc/subshell

SubShell is a python command shell used to control and execute commands
through HTTP requests to a webshell. SubShell acts as the interface to
the remote webshells.

https://github.com/linuxsec/indoxploit-shell
Webshell with unique features

https://github.com/kuniasahi/mpshell
一个简单的phpwebshell

https://github.com/datasiph0n/MyBB-Shell-Plugin
https://github.com/magicming200/evil-koala-php-webshell
邪恶考拉php webshell。

https://github.com/0xK3v/Simple-WebShell

https://github.com/djoq/docker-pm2-webshell
SSH access to a docker virtual machine via browser.

https://github.com/SMRUCC/GCModeller.WebShell
GCModeller web user interface

https://github.com/darknesstiller/WebShells
Proyecto para revisión de funcionalidades de WebShells

https://github.com/devilscream/remoteshell
Simple Webshell based on Terminal.

https://github.com/0verl0ad/gorosaurus

https://github.com/grCod/poly
A python script that generates polymorphic webshells.

https://github.com/cryptobioz/wizhack
Get shellcodes and webshells quickly.

https://github.com/amwso/docker-webshell
b374k webshell in docker

https://github.com/William-Hunter/JSP_Webshell
一个简单的使用jsp实现DB CRUD 操作的webshell模拟

https://github.com/yangbaopeng/ashx_webshell
ashx_webshell

https://github.com/webshellpub/awsome-webshell
webshell样本大合集。收集各种webshell用于webshell分析与发现。

https://github.com/noalh8t/simple-webshell

https://github.com/s3cureshell/wso-2.8-web-shell
WSO 2.8.5 webshell

https://github.com/LiamRandall/simpleexec
A simple webshell in Go.

https://github.com/Samorodek/humhub-modules-webshell
Simple web shell.

https://github.com/mwambler/webshell-xpages-ext-lib

https://github.com/AVGP/Wesh
The JS Webshell

https://github.com/edibledinos/weevely3-stealth

Weevely is a command line web shell dynamically extended over the
network at runtime, designed for remote server administration and
penetration testing.

https://github.com/lehins/haskell-webshell
SSH Webshell in Haskell

https://github.com/guglia001/php-secure-remove
https://github.com/gokyle/webshell_tutorial
Tutorial site for webshell.

https://github.com/azmanishak/webshell-php
Webshell PHP library

https://github.com/andrefernandes/docker-webshell
docker-webshell

https://github.com/codehz/node-webshell

https://github.com/koolshare/merlin-webshell
merlin_thunder

https://github.com/StephaneP/erl-webshell

https://github.com/jjjmaracay3/webshells
asp,aspx,php,jsp,pl,py 各种webshell

https://github.com/grCod/webshells

https://github.com/ian4hu/bootshell
A JSP WebShell with bootstrap.

https://github.com/Ghostboy-287/wso-webshell

WSO php webshell

https://github.com/xiaoxiaoleo/xiao-webshell
a collection of webshell 

https://github.com/alexbires/webshellmanagement
manage all the shells

https://github.com/codeT/collectWebShell
collect common webshell

https://github.com/PhilCodeEx/jak3fr0z

https://github.com/Ettack/WebshellCCL
辅助过安全狗

https://github.com/jubal-R/TinyWebShell
A simple php web shell and client with an interactive console for use in
CTFs, wargames, etc. The goal is to keep the web shell tiny by moving
as much code as possible to the client side.

https://github.com/CaledoniaProject/AxisInvoker
A minimal webshell for Apache AXIS2

https://github.com/theBrianCui/ISSS_webShell
The official website (source) of the Information & Systems Security Society.

https://github.com/webshell/webshell-node-sdk
The easiest way to use Webshell in javascript using Node.js

https://github.com/Medicean/AS_BugScan

通过 Webshell 创建 BugScan 节点(需要目标支持 Python2.7)

https://github.com/3xp10it/xwebshell

免杀webshell

https://github.com/niemand-sec/RazorSyntaxWebshell
Webshell for Razor Syntax (C#)

https://github.com/LuciferoO/webshell-collector
This is a webshell collector project

https://github.com/0verl0ad/HideShell
A tool to ofuscate big webshells (c99, r57…). Can hide your webshell from AV, LMD, Neopi, Web Shell Detector, etc.

https://github.com/L-codes/oneshellcrack
oneshellcrack 是一个非常快的webshell暴力破解工具

https://github.com/ArchAssault-Project/webshells
webshells repo for arch assault

https://github.com/AndrHacK/andrshell
DDoS WEB SHELL – PYTHON3