Ensiko Shell

[_Username_Witheld_]

Please login or register to view this content

[Kevin300]

Ensiko Shell
Does it find shell from domains list?
Ensiko is a PHP web shell with ransomware capabilities that targets various platforms such as Linux, Windows, macOS, or any other platform that has PHP installed. The malware has the capability to remotely control the system and accept commands to perform malicious activities on the infected machine.

It can also execute shell commands on an infected system and send the results back to the attacker via a PHP reverse shell. It is capable of scanning servers for the presence of other webshells, defacing websites, sending mass emails, downloading remote files, disclosing information about the affected server, brute-force attacks against file transfer protocol (FTP), cPanel, and Telnet, overwriting files with specified extensions, and more.

The malware has the ability to be password-protected. For authentication, the malware displays a Not Found page with a hidden login form 

More info here: https://www.trendmicro.com/en_sg/researc...ities.html

[Kevin300]

Can this find shell from url lists?

[hacxx]

Can this find shell from url lists?

Use a tool link Hacxx Dork to drop url lists.