Which tool is described as a PHP/Python-based script that helps in scanning and discovering php/cgi/perl/asp/aspx shells and maintains a web shells signature database?

• A. Web Shell
• B. WSO Php Webshell
• C. Web Shell Detector
• D. Weevely

Answer: (C)

The scenario describes a tool focused on detecting web shells by scanning environments and using a growing signature database to identify known payloads across multiple languages. Web Shell Detector fits this exactly because it’s described as a PHP/Python-based script that scans for php/cgi/perl/asp/aspx shells and maintains a web shells signature database, enabling quick identification of compromised or planted shells.

Other options don’t match this role: a generic Web Shell is just the concept of a shell, a technique or payload; WSO Php Webshell is a toolkit for creating and managing web shells rather than detecting them; Weevely is a PHP-based backdoor framework used for post-exploitation, not for detection or signature maintenance.