Who know it would be so easy to create programs from the command line?

Cookie-gated PHP webshells use obfuscation, php-fpm execution, and cron-based persistence to evade detection in Linux hosting environments. This post examines how this tradecraft conceals execution ...

They can even replace classic Linux tools and let you play old PC games.