Web shells for use in penetration testing