A web shell is a command shell (program or script) for remotely managing a web server.
It can be used for legitimate tasks, but is most often used in cyberattacks.
— Once launched, the shell acts as a backdoor: it gives the attacker access to the server's file system and databases, allows them to eavesdrop on traffic, and remotely execute commands.