Forum Discussion
How ASM can mitigate the web shell attacks?
I have found this doc https://devcentral.f5.com/articles/webshells
This is useful understanding how these attacks work, but not clear about how we exactly mitigate or if ASM need to be configured to achieve this mitigation.
Please suggests.
1 Reply
that would be taken care of by the signature sets. these shells execute cat or ls or ... to look into passwd or other things. that is something attack signatures can detect very well.
but to be honest if you think there are web shells on your servers you might want to look into that first and get that solved.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com