sshimpanzee

Sshimpanzee Sshimpanzee permite construir um servidor ssh reverso estático. Em vez de escutar em uma porta e aguardar conexões, o servidor ssh iniciará uma conexão reversa para o IP do atacante, como um shell reverso comum. Sshimpanzee permite aproveitar todos os recursos de uma conexão ssh comum...

reverse_ssh

Reverse SSH Crédito da arte para https://www.instagram.com/smart.hedgehog.art/ Quer usar SSH para reverse shells? Agora você pode. Gerencie e conecte-se a reverse shells com sintaxe SSH nativa Encaminhamento dinâmico, local e remoto Implementações nativas de SCP e SFTP para recuperar arquivos de...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

Supershell

Supershell은 WEB 서비스를 통해 접근하는 C2 원격 제어 플랫폼으로, 역방향 SSH 터널을 구축하여 완전한 인터랙티브 셸을 획득하고, 다중 플랫폼 아키텍처 Payload를 지원합니다. 기능 특징 • 지원 플랫폼 • 아키텍처 다이어그램 • 빠른 구축 • 사용 문서 • 기능 데모 • 면책 고지 • 감사 简体中文 • English 일반적인 침투 테스트 및 대회에서 리버스 셸을 사용할 때 Ctrl + C로 셸이 실수로 종료되는 것이 고민이신가요? 인터랙티브 스크립트를 실행하는 것이 어려우신가요? 일반적인 리버스 셸은 단순히...

tap

منصة TrustedSec للهجوم TAP TAP - أداة بناء منصات اختبار الاختراق عن بُعد. كتبه: David Kennedy @HackingDave الشركة: TrustedSec https://www.trustedsec.com صفحة المشروع: https://github.com/trustedsec/tap مشروع TrustedSec - حقوق النشر 2020 أنظمة التشغيل المدعومة: لينكس يُفضَّل Ubuntu Linux ما هو TAP؟...

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

MAL-2026-10100 Malicious code in proxy-check-i (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da390c130eb840eb129a5d43faf0a64a0f0f602070243613aa0e2f8ea8f6d04 The package advertises itself as a wrapper for a 'qsshd executable' but the bundled Go binary is a reverse-SSH daemon that grants a remote operator...

CVE-2025-61939

CVE-2025-61939 concerns Columbia Weather Systems MicroServer. An unused function can initiate a reverse SSH connection to a vendor-registered domain without mutual authentication. An attacker on a local network with admin access to the MicroServer web portal and the ability to manipulate DNS resp...

Living off the land with Bluetooth PAN

TL:DR Bluetooth is enabled by default on the majority of Windows laptops Bluetooth PAN can be used to bridge connections locally between a client laptop and attacking device Attackers can use Microsoft native SSH client to forward out internal network traffic Windows native SSH is accessible to...

packetStrider - A Network Packet Forensics Tool For SSH

packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. The problem that packet strider aims to help with AKA Why?...

Cisco Umbrella Virtual Appliance 2.0.3 Undocumented Support Tunnel Vulnerability

Cisco Umbrella Virtual Appliance versions 2.0.3 and below contain an undocumented, auto-initiated reverse SSH tunnel which allows the Cisco Umbrella support team to have persistent and unrestricted access to the virtual appliance. Cisco Umbrella Virtual Appliance - Undocumented Support Tunnel...

TrustedSec Attack Platform: TAP

TAP is a remote penetration testing platform builder. For folks in the security industry, traveling often times becomes a burden and adds a ton of cost to the customer. TAP was designed to make the deployment of these boxes super simple and create a self-healing and stable platform to deploy remo...