RevShell

🔥 RevShell Project — Advanced Windows Reverse Shell ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░ ▒██████▒▒░▓█▒░██▓...

HTTP-revshell

Powershell HTTP/S Reverse Shell HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It uses a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS...

revshell

This repository does not have a README...

Malicious code in poc-revshell (PyPI)

Source: amazon-inspector 08edc162927c80cde9e467244a435780f65ca95823e97ec73534faf34233ac9a poc-revshell 0.1.0 ships a reverse-shell backdoor that fires both at install time and at import time. setup.py registers a custom install cmdclass PostInstall that starts a daemon thread executing a routine...

Malicious code in prmduc193 (PyPI)

Source: kam193 766c3df26ad3e62a1923e1c6879348aba96deafb8bf62a1555c589b57cd91fc0 Importing the package starts a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-prmduc193 Reasons based on the campaign: - The package contains code to...

Malicious code in huggingleg2 (PyPI)

Source: kam193 19ba00b8fab08e8016af3bfb4ba9fbb18510b2aa823dfb82a46a5b3ecd477655 Installing the package starts a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-12-huggingleg2 Reasons based on the campaign: - The package contains code...

Malicious code in farooq4321 (PyPI)

Source: kam193 165ce280a6d073eebbba054677a6c80307c8353b31e41732ba1ffc1f8a020aa4 Code in setup.py attempts to call a webhook, but most importantly to execute a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-02-farooq4321 Reasons base...

Malicious code in cpan (PyPI)

Source: kam193 e70433969aea3c8283f99098b25b8a598f427b5fd451e9bfd5bc46098704bfb2 Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to imitate CPAN.org --- Category: MALICIOUS - The campaign has...

Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)

Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simple data. Pentest? An artifact from some red team curse? --...

Malicious code in artifact-lab-3-package-6e10193e (PyPI)

Source: kam193 be1776005a138f3a3c26df212fd9407dda2bb99a246703710810d30e6118ed79 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simple data. Pentest? An artifact from some red team curse? --...

Exploit for Out-of-bounds Write in Gibbonedu Gibbon

CVE-2023-45878 Wrote this script based on the work of https:/...

MAL-2024-12202 Malicious code in artifact-lab-3-package-b9485a2f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 902094a9d90c1b9cc5eca3aa3d809929f664931dfa9feaea432bf85d205b06ed Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS Unauthenticated RCE PoC This is a script written...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS Unauthenticated Big Upload File RCE PoC This is a...

Exploit for Injection in Glpi-Project Glpi

It is an offensive tool for GLPI. This repository contains a pro...

Exploit for Injection in Glpi-Project Glpi

It is an offensive tool for GLPI, a proof-of-concept exploit for...

Secbutler - The Perfect Butler For Pentesters, Bug-Bounty Hunters And Security Researchers

Essential utilities for pentester, bug-bounty hunters and security researchers secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing cybersecurity activities like installing...

WhatsUp Gold 2022 22.1.0 Build 39 Cross Site Scripting

Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting XSS Date: April 18, 2023 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.22.1.0 Build 39 Tested on: Windows 2022 Server CVE : CVE-2023-35759 Reference:...

MAL-2022-5775 Malicious code in revshell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72eab8f20fa73ec0e788be1ec74500bfd8279edf352f3c5c1839d837e9a68130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in revshell

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...