https://github.com/danielmiessler/SecLists/tree/master/Web-Shells/FuzzDB
https://github.com/xl7dev/WebShell
http://gettalfa.rf.gd/
AlfaShell Updating and change them encoding every week and is undetectable for many firewalls and have new waf bypass methods
