Which tool is described as a PHP/Python-based script that helps in scanning and discovering php/cgi shells and has a web shells signature database?

• A. Weevely
• B. Web Shell Detector
• C. API
• D. Web Shell

Answer: (B)

This question is about recognizing a tool designed to find web shells by scanning for known signatures. The described script is PHP/Python-based and focuses on scanning for php/cgi shells, using a database of web shell signatures to identify known variants. That matches Web Shell Detector, which is built to scan web servers for web shells and compare findings against a signature database. Weevely is a PHP-based backdoor used after exploitation for remote control, not a detection utility; API is just a generic interface term, not a specialized scanning tool; a Web Shell is the malicious script itself, not a detection tool. So the correct tool is Web Shell Detector.