Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hostingenvironments - RedPacket Security

Threat actors are increasingly abusing HTTP cookies as a control channel for PHP-based webshells on Linux servers. Instead of exposing command execution