Supershell

Supershellは、WEBサービスを介してアクセスするC2遠隔制御プラットフォームであり、リバースSSHトンネルを確立することで完全なインタラクティブシェルを取得し、マルチプラットフォームアーキテクチャのPayloadをサポートします 機能の特徴 • 対応プラットフォーム • アーキテクチャ図 • クイックビルド • 使用ドキュメント • 一部の機能デモ • 免責事項 • 謝辞 簡体中文 • English 通常のペネトレーションテストや競技では、リバースシェルを使用する際に Ctrl + C...

reverse_ssh

Reverse SSH 아트 크레딧: https://www.instagram.com/smart.hedgehog.art/ SSH를 리버스 셸에 사용하고 싶으신가요? 이제 가능합니다. 기본 SSH 구문으로 리버스 셸 관리 및 연결 동적, 로컬 및 원격 포워딩 대상에서 파일을 검색하기 위한 기본 SCP 및 SFTP 구현 전체 윈도우 셸 http, websockets, tls 등 다양한 네트워크 전송 높은 신뢰도의 제어 채널을 위한 상호 클라이언트 및 서버 인증 그 외에도!text +----------------+ +---------+...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

sshimpanzee

Sshimpanzee Sshimpanzee를 사용하면 정적 리버스 SSH 서버를 구축할 수 있습니다. SSH 서버는 포트에서 수신 대기하며 연결을 기다리는 대신, 일반적인 리버스 셸처럼 공격자 IP로 역방향 연결을 시작합니다. Sshimpanzee를 사용하면 일반 SSH 연결의 모든 기능예: 포트 포워딩, 동적 SOCKS 프록시, FTP 서버을 활용할 수 있습니다. 더 중요한 점은, 피해자 시스템에서 공격자 서버로의 직접 연결이 불가능할 경우 DNS 터널링, ICMP 터널링, HTTP 캡슐화와 같은 다양한 터널링 메커니즘을...

tap

The TrustedSec Attack Platform TAP TAP - 远程渗透测试平台构建器。 作者：David Kennedy @HackingDave 公司：TrustedSec https://www.trustedsec.com 项目页面：https://github.com/trustedsec/tap TrustedSec 项目 - 版权所有 2020 支持的操作系统：Linux（首选 Ubuntu Linux） 什么是 TAP？ TAP 是一个远程渗透测试平台构建器。对于安全行业的人来说，出差常常成为一种负担，并给客户增加大量成本。TAP...

CVE-2026-74232

Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

MAL-2026-10100 Malicious code in proxy-check-i (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da390c130eb840eb129a5d43faf0a64a0f0f602070243613aa0e2f8ea8f6d04 The package advertises itself as a wrapper for a 'qsshd executable' but the bundled Go binary is a reverse-SSH daemon that grants a remote operator...

CVE-2025-61939

CVE-2025-61939 concerns Columbia Weather Systems MicroServer. An unused function can initiate a reverse SSH connection to a vendor-registered domain without mutual authentication. An attacker on a local network with admin access to the MicroServer web portal and the ability to manipulate DNS resp...

Living off the land with Bluetooth PAN

TL:DR Bluetooth is enabled by default on the majority of Windows laptops Bluetooth PAN can be used to bridge connections locally between a client laptop and attacking device Attackers can use Microsoft native SSH client to forward out internal network traffic Windows native SSH is accessible to...

packetStrider - A Network Packet Forensics Tool For SSH

packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. The problem that packet strider aims to help with AKA Why?...

Cisco Umbrella Virtual Appliance 2.0.3 Undocumented Support Tunnel Vulnerability

Cisco Umbrella Virtual Appliance versions 2.0.3 and below contain an undocumented, auto-initiated reverse SSH tunnel which allows the Cisco Umbrella support team to have persistent and unrestricted access to the virtual appliance. Cisco Umbrella Virtual Appliance - Undocumented Support Tunnel...

TrustedSec Attack Platform: TAP

TAP is a remote penetration testing platform builder. For folks in the security industry, traveling often times becomes a burden and adds a ton of cost to the customer. TAP was designed to make the deployment of these boxes super simple and create a self-healing and stable platform to deploy remo...