Supershell

Supershell es una plataforma C2 de control remoto accesible a través de un servicio WEB. Mediante el establecimiento de túneles SSH inversos, obtiene una Shell totalmente interactiva y admite Payloads de múltiples arquitecturas de plataforma...

reverse_ssh

反向SSH 艺术作品致谢 https://www.instagram.com/smart.hedgehog.art/ 想要使用SSH实现反向Shell？现在你可以了。 使用原生SSH语法管理和连接反向Shell 动态、本地和远程转发 原生SCP和SFTP实现，用于从目标检索文件 完整的Windows Shell 多种网络传输协议，例如http、websockets、tls等 客户端与服务器相互认证，建立高信任控制通道 以及更多！text +----------------+ +---------+ | | | | | | +---------+ RSSH | | Reverse | | ...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

sshimpanzee

Sshimpanzee Sshimpanzee 允许你构建一个静态的 反向 SSH服务器。它不是监听端口等待连接，而是SSH服务器会主动发起反向连接到攻击者的IP，就像常规的反向shell一样。Sshimpanzee 让你能够利用常规SSH连接的所有功能，比如端口转发、动态SOCKS代理或FTP服务器。 更重要的是，如果从受害机器到攻击者服务器的直接连接不可行，它提供了不同的隧道机制，例如DNS隧道、ICMP隧道或HTTP封装。它还支持HTTP和SOCKS5代理。可在lexfo的博客上获取一篇技术论文。 DOCKER构建 - 推荐 root@kitploit: sudo docker...

tap

La plataforma de ataque de TrustedSec TAP TAP - Constructor de plataformas de pruebas de penetración remotas. Escrito por: David Kennedy @HackingDave Empresa: TrustedSec https://www.trustedsec.com Página del proyecto: https://github.com/trustedsec/tap Un proyecto de TrustedSec - Copyright 2020...

CVE-2026-74232

Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

MAL-2026-10100 Malicious code in proxy-check-i (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da390c130eb840eb129a5d43faf0a64a0f0f602070243613aa0e2f8ea8f6d04 The package advertises itself as a wrapper for a 'qsshd executable' but the bundled Go binary is a reverse-SSH daemon that grants a remote operator...

CVE-2025-61939

CVE-2025-61939 concerns Columbia Weather Systems MicroServer. An unused function can initiate a reverse SSH connection to a vendor-registered domain without mutual authentication. An attacker on a local network with admin access to the MicroServer web portal and the ability to manipulate DNS resp...

Living off the land with Bluetooth PAN

TL:DR Bluetooth is enabled by default on the majority of Windows laptops Bluetooth PAN can be used to bridge connections locally between a client laptop and attacking device Attackers can use Microsoft native SSH client to forward out internal network traffic Windows native SSH is accessible to...

packetStrider - A Network Packet Forensics Tool For SSH

packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. The problem that packet strider aims to help with AKA Why?...

Cisco Umbrella Virtual Appliance 2.0.3 Undocumented Support Tunnel Vulnerability

Cisco Umbrella Virtual Appliance versions 2.0.3 and below contain an undocumented, auto-initiated reverse SSH tunnel which allows the Cisco Umbrella support team to have persistent and unrestricted access to the virtual appliance. Cisco Umbrella Virtual Appliance - Undocumented Support Tunnel...

TrustedSec Attack Platform: TAP

TAP is a remote penetration testing platform builder. For folks in the security industry, traveling often times becomes a burden and adds a ton of cost to the customer. TAP was designed to make the deployment of these boxes super simple and create a self-healing and stable platform to deploy remo...