Shell access means direct command-line control over a system, usually through a Unix shell, PowerShell, or another remote command interface. Instead of using a web form or API, the operator can run commands, inspect files, change configuration, start processes, and pivot to other hosts if permissions allow. In security terms, shell access often marks the point where a bug stops being just a bug and becomes real system control.
Attackers seek shell access because it can expose credentials, enable persistence, and let them disable defenses or deploy malware. Defenders treat it as a high-risk privilege: they restrict remote shells, require authentication, log command activity, and isolate tooling inside containers or limited service accounts. If an exposed application bridge, admin panel, or plugin can be turned into shell access, the result may be remote code execution and a full compromise path.