This is the official community fork for the abandoned eggshell project. The current project is updated to work for iOS 11+, but if you have issues or want to contribute to EggShell feel free to do so here, instead of the original repository.
The original EggShell tool was a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location tracking, shell command execution, persistence, escalating privileges, password retrieval, and much more. This is project is a proof of concept, intended for use on machines you own.
- Python 3.0 or higher
- Theos and $THEOS set
- iOS 13 SDKs in $THEOS/sdks
Using git clone:
git clone https://github.com/rpwnage/eggshell-community-fork eggshell && cd eggshell && python3 eggshell.pyUsing the github.com website:
1. Download the project using the "Download Zip" file at the top of this page.
2. Extract it to the location of your choice, preferably somewhere easy to access, such as your desktop.
3. Open your terminal.
4. Use "cd" to change your working directory to the eggshell folder.
5. Type "python3 eggshell.py", and you're on your way!
Eggshell payloads are executed on the target machine. The payload first sends over instructions for getting and sending back device details to our server and then chooses the appropriate executable to establish a secure remote control session.
Selecting bash from the payload menu will give us a 1 liner that establishes an eggshell session upon execution on the target machine
Teensy is a USB development board that can be programmed with the Arduino ide. It emulates usb keyboard strokes extremely fast and can inject the EggShell payload just in a few seconds. Selecting teensy will give us an arduino based payload for the teensy board. After uploading to the teensy, we can use the device to plug into a macOS usb port. Once connected to a computer, it will automatically emulate the keystrokes needed to execute a payload.
After a session is established, we can execute commands on that device through the EggShell command line interface. We can show all the available commands by typing "help"
Both iOS and macOS payloads have picture taking capability. The picture command lets you take a picture from the iSight on macOS as well as the front or back camera on iOS.
Similar to most command line interfaces, EggShell supports tab completion. When you start typing the path to a directory or filename, we can complete the rest of the path using the tab key.
The Multihandler option lets us handle multiple sessions. We can choose to interact with different devices while listening for new connections in the background.
Similar to the session interface, we can type "help" to show Multihandler commands
- Linus Yang / Ryley Angus for the iOS Python package
- AlessandroZ for LaZagne
By using EggShell, you agree to the GNU General Public License v2.0 included in the repository. For more details at http://www.gnu.org/licenses/gpl-2.0.html. Using EggShell for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
- screenshot - needs upgrades from deprecated methods
- picture - needs upgrades from deprecated methods