pentestkoala

Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

PortForwarder

Windows TCP Port Forwarder A high-performance TCP port forwarder for Windows with optional IP whitelisting and verbose logging capabilities. Features ✅ Forward TCP traffic from a local port to any remote host:port ✅ Optional IP whitelisting for enhanced security ✅ Port 445 / SMB takeover mode...

bore

bore Un túnel TCP moderno y simple en Rust que expone puertos locales a un servidor remoto, evitando los cortafuegos de conexión NAT estándar. Eso es todo lo que hace: ni más, ni menos. root@kitploit: Instalación requiere Rust, ver alternativas abajo cargo install bore-cli En tu máquina local bor...

gost

GO Simple Tunnel GO语言实现的安全隧道 English README 特性 多端口监听 可设置转发代理，支持多级转发代理链 支持标准HTTP/HTTPS/HTTP2/SOCKS4A/SOCKS5代理协议 Web代理支持探测防御 支持多种隧道类型 SOCKS5代理支持TLS协商加密 Tunnel UDP over TCP TCP/UDP透明代理 本地/远程TCP/UDP端口转发 支持ShadowsocksTCP/UDP协议 支持SNI代理 权限控制 负载均衡 路由控制 DNS解析和代理 TUN/TAP设备 Wiki站点: v2.gost.run Telegram讨论群:...

Win-PortFwd

Win-PortFwd Powershell script to setup windows port forwarding using native netsh client Install: git clone https://github.com/deepzec/Win-PortFwd.git Usage: .\win-portfwd.ps1 or powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Example : Note: This script require admin...

CVE-2021-1675

CVE-2021-1675 Modified from https://github.com/sailay1996/PrintNightmare-LPE, supports remote exploitation. 1. Upload PrintNightmareLPE.exe and vlib.dll to the remote server, then execute PrintNightmareLPE.exe. 2. Set up port forwarding locally: netsh interface portproxy add v4tov4 listenport=313...

Ssh Mitm

SSH-MITM SSH-MITM is a man-in-the-middle SSH proxy for security audits and penetration testing. It supports intercepting SSH, SCP, and SFTP sessions, agent forwarding, port forwarding, and more. This repository was a mirror and is no longer updated. The official repositories are: GitHub:...

reverse_ssh

反向SSH 艺术作品致谢 https://www.instagram.com/smart.hedgehog.art/ 想要使用SSH实现反向Shell？现在你可以了。 使用原生SSH语法管理和连接反向Shell 动态、本地和远程转发 原生SCP和SFTP实现，用于从目标检索文件 完整的Windows Shell 多种网络传输协议，例如http、websockets、tls等 客户端与服务器相互认证，建立高信任控制通道 以及更多！text +----------------+ +---------+ | | | | | | +---------+ RSSH | | Reverse | | ...

zphisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related toZphisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

File-Tunnel

File Tunnel Tunnel TCP connections through a file server. A full list of supported file systems can be found here. Download Portable executables for Windows, Linux and Mac can be found over in the releases section. Example 1 - Bypassing a firewall You'd like to connect from Host A to Host B, but ...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

sish

sish 用于 HTTPS、WSS、TCP、别名和 SNI 的开源 SSH 隧道技术。 如果你喜欢 serveo/ngrok 风格的便捷分享，但又想使用普通的 SSH 并运行自己的基础设施，那么 sish 就是为此而生的。 最终用户无需自定义客户端 支持公网和私有隧道工作流 提供 Docker 和二进制发布 专为生产级自托管设计 文档 | 托管服务 | 发布页 | Docker 镜像 | 由 pico.sh 赞助 为什么选择 sish sish 运行着一个专注于转发和多路复用的 SSH 服务器。用户可以使用他们熟悉的命令进行连接，sish 负责处理路由。 典型用例 通过 HTTPS...

frp

frp README | 中文文档 frp 是一个专注于内网穿透的高性能的反向代理应用，支持 TCP、UDP、HTTP、HTTPS 等多种协议，且支持 P2P 通信。可以将内网服务以安全、便捷的方式通过具有公网 IP 节点的中转暴露到公网。 Sponsors frp 是一个完全开源的项目，我们的开发工作完全依靠赞助者们的支持。如果你愿意加入他们的行列，请考虑 赞助 frp 的开发。 Gold Sponsors The complete IDE crafted for professional Go developers The sovereign cloud that puts you ...

xc

XC 类似于Netcat的反向Shell，适用于Linux和Windows。 功能 Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active forwards !rmfwd remov...

sshimpanzee

Sshimpanzee Sshimpanzee allows you to build a static reverse ssh server. Instead of listening on a port and waiting for connections, the ssh server will initiate a reverse connect to attacker's ip, just like a regular reverse shell. Sshimpanzee allows you to take advantage of every features of a...

tornado

tornado anonymously reverse shell over onion network using hidden services without portfortwarding Explore the docs fully undetectable reverse shell · View Demo · bulletproof anonymity Table of Contents 1. What is tornado? 2. Built With 3. Getting Started Installation 4. Usage 5. Roadmap 6...

iox

iox English | 中文 Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. When I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, wh...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

sidedoor

sidedoor sidedoor 通过一个 shell 脚本守护进程维持 SSH 连接或隧道。 主要用途是维持到本地 SSH 服务器（或其他端口）的远程端口转发。这样，本地设备可以被访问，而无需使用可能被 NAT 或防火墙阻挡的传入连接，或对于移动设备而言不切实际的连接。 SSH 客户端可以通过 sidedoor 隧道到的反向 SSH 代理连接到设备。这个代理服务器可以由第三方或云服务运行，且不可信。 sidedoor 启用 SSH keepalives，并以指数退避重试 SSH。为了尽快重新连接，当网络接口被激活（或变更）时，它会重置退避时间。 其他用途： 通过远程转发本地 Web...