hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

reverse-ssh

ReverseSSH A statically-linked ssh server with a reverse connection feature for simple yet powerful remote access. Most useful during HackTheBox challenges, CTFs or similar. Has been developed and was extensively used during OSCP exam preparation. Get the latest Release Features Catching a revers...

armory

dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM Description This is...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

Platypus

Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host — through on...

LinPwn

LinPwn About LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation. Connection Set your IP and port you want it to connect to in the Connection class. Place the LinPwn binary on the target machine. Run nc -lvp PORT on your machine and then ru...

SharpSploitConsole

SharpSploitConsole Console Application designed to interact with SharpSploit released by @cobbrio https://github.com/cobbr/SharpSploit SharpSploit is a tool written by @cobbrio that combines many techniques/C code from the infosec community and combines it into one sweet DLL. It's awesome so chec...

React2Shell

⚛️ React2Shell CVE-2025-55182 Kit de explotación avanzado para Server Actions de Next.js CVE-2025-55182. React2Shell es un potente envoltorio de shell interactivo diseñado para explotar la vulnerabilidad React2Shell. Va más allá de un simple RCE al proporcionar historial de comandos, capacidades d...

redshell

RedShell An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Optional Cobalt Strike integration pulls beacon SOCKS4/5 proxies from the team server. Automatically logs activities to a local CSV file and a Cobalt Stri...

Supershell

Supershell es una plataforma C2 de control remoto accesible a través de un servicio WEB. Mediante el establecimiento de túneles SSH inversos, obtiene una Shell totalmente interactiva y admite Payloads de múltiples arquitecturas de plataforma. Características • Plataformas soportadas • Diagrama de...

StrutsShell

StrutsShell Apache Struts（CVE-2017-5638）Shell 简介 "LowNoiseHG LNHG Struts Shell "（以下简称"StrutsShell "）诞生于2017年3月，当时我们认识到无需手动利用Apache Struts CVE-2017-5638漏洞（手动发送HTTP GET请求）的实用性，同时也发现针对该漏洞的相应Metasploit模块无法正常工作（至少在我们的测试案例中如此）。 描述 StrutsShell 的基本操作包括：处理针对被攻击平台（Windows、Linux等）的命令行（shell）输入，并利用Apache...

yls

YLS Servidor de lenguaje para el lenguaje YARA. 🚀 Características: Autocompletado de código de todos los módulos disponibles incluidos los parámetros de las funciones Documentación de funciones para información emergente y autocompletado de código Formato de código con criterio propio Ayuda de...

DNS-Shell

DNS-shell DNS-Shell is an interactive Shell over DNS channel. The server is Python based and can run on any operating system that has python installed, the payload is an encoded PowerShell command. Understanding DNS-Shell The Payload is generated when the sever script is invoked and it simply...

CVE-2024-7029

EN GenAvTechRCEExploit 一种针对 AvTech 设备中 CVE-2024-7029 漏洞的概念验证漏洞利用工具，允许远程代码执行（RCE）。该工具可以扫描易受攻击的设备并与之交互执行命令。 功能 漏洞检测 ：检查 AvTech 设备是否存在 RCE 漏洞。 交互式 Shell ：通过交互式 Shell 在目标设备上执行命令。 多线程扫描 ：使用多线程同时扫描多个目标。 有效载荷执行 ：通过发送精心构造的有效载荷远程执行命令来攻击目标。 要求 Python 3.7+ requests 库 prompttoolkit 库 aliveprogress 库...

keimpx

Introducción keimpx es una herramienta de código abierto, publicada bajo la Licencia Apache 2.0. Se puede usar para verificar rápidamente credenciales válidas en una red a través de SMB. Las credenciales pueden ser: Combinación de usuario / contraseña en texto plano. Combinación de usuario / hash...

Eden-RAT

Eden-RAT 背景 在开发 EgoDrop 和 DuplexSpy 的过程中，我成功地在基于 C 的 GUI 应用程序中实现了一个交互式 shell。随后，我想起了早期因开发经验有限而暂停的一个项目。因此，我决定重新审视并完成它。 这个项目的想法源于我学习 Web 渗透测试的时候。 当发现一个 RCE（远程命令/代码执行）漏洞时，我们通常会用简单的 Linux 命令（例如 id、whoami、ls、cat /etc/passwd）来演示，然后往往就此结束。然而，如果我们希望进行进一步的后渗透利用——例如进入内网进行横向移动——我们可能会依赖诸如 metasploit、nc 或...

CVE-2025-52970

CVE-2025-52970 FortiWeb Authentication Bypass to Remote Code Execution Exploit Features Weaponized by adding interactive shell to enable remote code execution Usage python CVE-2025-52970.py -t target.com Demo References https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX Exploit de shell interactivo de Struts 2 DefaultActionMapper para CVE-2013-225 S2-016 El DefaultActionMapper de Struts 2 admite un método para cambios de estado de navegación en cortocircuito, prefijando parámetros con "action:" o...

larac2shell

LaraC2 Shell -- MDE Live Response Interactive Shell Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response. Feature| Detail ---|--- Platform| PowerShell Core 7.0+ Windows, Linux, macOS API modes| Internal portal, near-realtime and Official public, stateless Execution|...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Interactive shell HTTP hijack + POST + AES-256-CBC/BASE64 Detection -dnslog DNSLog No-Output Detection Nuclei -poc Vulnerability Echo Detection Exploitation -exp Interactive shell base64 echo -exp2 Interactive shell HTTP hijack + POST + Base64 -exp3...