• A web shell is a browser-based shell session we can use to interact with the underlying operating system of a web server.
• to gain remote code execution via web shell, we must first find a website or web application vulnerability that can give us file upload capabilities.
• Most web shells are gained by uploading a payload written in a web language on the target server.