Behinder (冰蝎)
A widely used WebShell management tool in the domestic penetration testing field. Its core feature is traffic obfuscation based on AES encryption. It is commonly used in post-exploitation phases of security research and penetration testing.
Timeline (last 90 days)
The core feature of Behinder (冰蝎) is AES-encryption-based traffic obfuscation, with its communication key hardcoded by default in the shell file.
Behinder (冰蝎) and Godzilla (哥斯拉) are the two most widely used WebShell management tools in the domestic penetration testing field.
In the demonstration, the AI decoded Base64 to recover the Behinder backdoor's connection password as "admin".
All Facts (3)
The core feature of Behinder (冰蝎) is AES-encryption-based traffic obfuscation, with its communication key hardcoded by default in the shell file.
50%UnverifiedBehinder (冰蝎) and Godzilla (哥斯拉) are the two most widely used WebShell management tools in the domestic penetration testing field.
50%UnverifiedIn the demonstration, the AI decoded Base64 to recover the Behinder backdoor's connection password as "admin".
50%