Web Scan Collector v0.2
This simple script will be dropped in place of a 404 in your redirection config for nginx/apache/IIS.
The aim is to collect POST data sent to webshells attempted to be accessed on your server, this also collects GET URI query strings too.
Code scavenged together by pARODY from online sources.
original credits - https://gist.github.com/magnetikonline/650e30e485c0f91f2f40
v0.2 - Updated logging format to JSON for ingestion into splunk