A reverse shell is a shell that runs on a victim's computer or server, connecting back to the attacker's machine. Unlike a traditional shell, where the attacker initiates a connection to the victim's machine, a reverse shell initiates a connection from the victim's machine to the attacker's machine.
Look for HTTP requests containing base64-encoded payloads or long strings with fsockopen, stream_socket_client, etc. Reverse Shell Php
Monitor changes to PHP files in web-accessible directories. Alert on new .php files in upload folders. A reverse shell is a shell that runs