• Web Shell Detector

    php/python script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a "web shells" signature database that helps to identify "web shells" up to 99%.

    PHP Version Python Version Fork on Github

Privacy policy

At ShellDetector, we are keenly aware of the trust users place in us and our responsibility to protect the privacy of user information. As part of this responsibility, we make public what information we collect when someone uses our products and services, why we collect it and how we use it to improve user experience and security industry products.

Collection and use of submitted files, URLs and personal information

Information we collect to provide you with the services includes:

How we use information we collect

We use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new services, and to protect our users.

When you contact ShellDetector, we may keep a record of your communication to help solve any issues you might be facing. We may use your email address to inform you about our services where you have agreed to this. We may also send you administrative messages.

ShellDetector processes personal information on servers in many countries around the world. We may process, transfer and/or store your personal information on a server located outside the country where you live. When we do so ShellDetector will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Information we share

When you submit a file to ShellDetector for scanning, we may store it and share it with the anti-malware and security industry (normally the companies that participate in ShellDetector receive files containing virus/web shells samples that their engines do not detect and are catalogued as malware by at least one other engine). The samples can be analysed by automatic tools and security analysts to detect malicious code and to improve antivirus engines.

Files, URLs, comments and any other content submitted to or shared within ShellDetector may also be included in premium private services offered by ShellDetector to the anti malware and ICT security industry, with the sole aim of improving research activities, expecting it to lead to an overall safer internet and greater end-user protection.

In addition, we may also share your information in the following circumstances:

We may share aggregated, anonymised information publicly and with our partners - like the anti-malware and security industry. For example, we may share information publicly to show statistical trends about the general use of our services.

In the event that ShellDetector is involved in a merger, acquisition or asset sale, we may disclose your personal data to the prospective seller or buyer of such business or assets.

You should not share files, URLs, comments or any other content with ShellDetector unless you have authority to share it.

Information security

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Your Rights

We will let you know if we plan to process your personal data for marketing purposes when we collect it. You can change your mind at any time by contacting us at [email protected].


Our website may, from time to time, contain links to and from the websites of our partners and members of the ShellDetector Community. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.


We will regularly review our compliance with our Privacy Policy. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we cannot resolve with our users directly.


Any changes we may make to our Privacy Policy in the future will be posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please feel free to contact us at [email protected].