H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

By exploiting insufficient permissions, it is possible to upload a web shell to a web server in such a way that it can be executed remotely. This shell can have various capabilities, thereby acting as a "gateway" to the underlying web server. The shell might execute at the higher permission level of the web server, providing the ability the execute malicious code at elevated levels.

Labels

attack-patterncapec
43 recorded

Relationships

child-ofTechnique
mapped-toTechnique
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
1 external

References

capec
CAPEC-650
open