Supershell

Supershell ist eine über einen WEB-Dienst zugängliche C2-Fernsteuerungsplattform. Durch die Einrichtung eines reversen SSH-Tunnels erhalten Sie eine vollständig interaktive Shell, die Payloads für mehrere Plattformarchitekturen unterstützt...

sshimpanzee

Sshimpanzee Sshimpanzee ti permette di costruire un server ssh reverse statico. Invece di mettersi in ascolto su una porta e attendere connessioni, il server ssh avvierà una connessione inversa verso l'IP dell'attaccante, proprio come una normale reverse shell. Sshimpanzee ti permette di sfruttar...

reverse_ssh

Reverse SSH Credito artistico a https://www.instagram.com/smart.hedgehog.art/ Vuoi usare SSH per le reverse shell? Ora puoi. Gestisci e connettiti a reverse shell con la sintassi nativa di SSH Dynamic, local e remote forwarding Implementazioni native di SCP e SFTP per recuperare file dai tuoi...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

tap

Die TrustedSec-Angriffsplattform TAP TAP - Remote-Builder für Penetrationstest-Plattformen. Geschrieben von: David Kennedy @HackingDave Firma: TrustedSec https://www.trustedsec.com Projektseite: https://github.com/trustedsec/tap Ein TrustedSec-Projekt - Copyright 2020 Unterstützte Betriebssysteme...

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

MAL-2026-10100 Malicious code in proxy-check-i (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da390c130eb840eb129a5d43faf0a64a0f0f602070243613aa0e2f8ea8f6d04 The package advertises itself as a wrapper for a 'qsshd executable' but the bundled Go binary is a reverse-SSH daemon that grants a remote operator...

CVE-2025-61939

CVE-2025-61939 concerns Columbia Weather Systems MicroServer. An unused function can initiate a reverse SSH connection to a vendor-registered domain without mutual authentication. An attacker on a local network with admin access to the MicroServer web portal and the ability to manipulate DNS resp...

Living off the land with Bluetooth PAN

TL:DR Bluetooth is enabled by default on the majority of Windows laptops Bluetooth PAN can be used to bridge connections locally between a client laptop and attacking device Attackers can use Microsoft native SSH client to forward out internal network traffic Windows native SSH is accessible to...

packetStrider - A Network Packet Forensics Tool For SSH

packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. The problem that packet strider aims to help with AKA Why?...

Cisco Umbrella Virtual Appliance 2.0.3 Undocumented Support Tunnel Vulnerability

Cisco Umbrella Virtual Appliance versions 2.0.3 and below contain an undocumented, auto-initiated reverse SSH tunnel which allows the Cisco Umbrella support team to have persistent and unrestricted access to the virtual appliance. Cisco Umbrella Virtual Appliance - Undocumented Support Tunnel...

TrustedSec Attack Platform: TAP

TAP is a remote penetration testing platform builder. For folks in the security industry, traveling often times becomes a burden and adds a ton of cost to the customer. TAP was designed to make the deployment of these boxes super simple and create a self-healing and stable platform to deploy remo...