S0598LinuxWindows

S0598P.A.S. Webshell

Platforms
2
ATT&CK
14.1
References
3

Description

[P.A.S. Webshell](https://attack.mitre.org/software/S0598) is a publicly available multifunctional PHP webshell in use since at least 2016 that provides remote access and execution on target web servers.(Citation: ANSSI Sandworm January 2021) Documented platforms: Linux, Windows. Catalogued in ATT&CK 14.1. 3 references curated.

Platforms· 2

LinuxWindows

References

  1. https://attack.mitre.org/software/S0598
  2. https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-005.pdf
  3. https://us-cert.cisa.gov/sites/default/files/publications/AR-17-20045_Enhanced_Analysis_of_GRIZZLY_STEPPE_Activity.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Sub-technique
Web Shell
Software
Caterpillar WebShell
Software
PsExec
Software
PowerSploit
Software
NETWIRE
Software
Mythic
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.