#shell

Villain on offsec.tools
Sponsor
Villain

Backdoor generator and multi-session handler for sessions sharing among connected sibling servers.

hoaxshell on offsec.tools
Sponsor
hoaxshell

Windows reverse shell payload generator and handler that abuses the http(s) protocol.

Shells on offsec.tools
Sponsor
Shells

A script for generating common revshells fast and easily.

fuxploider on offsec.tools
fuxploider

File upload vulnerability scanner and exploitation tool.

HTSHELLS on offsec.tools
HTSHELLS

Self contained web shells and other attacks via .htaccess files.

Shellcrypt on offsec.tools
Shellcrypt

A QoL tool to obfuscate shellcode.

Sshimpanzee on offsec.tools
Sshimpanzee

Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.

HTTP-revshell on offsec.tools
HTTP-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware.

web2shell on offsec.tools
web2shell

Automate converting webshells into reverse shells.

DripLoader on offsec.tools
DripLoader

Evasive shellcode loader for bypassing injection detection.

Nishang on offsec.tools
Nishang

Offensive PowerShell for red team, penetration testing and offensive security.

Hades on offsec.tools
Hades

Go shellcode loader that combines multiple evasion techniques.

Freeze-rs on offsec.tools
Freeze-rs

Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.

PyShell on offsec.tools
PyShell

Multiplatform Python webshell.

PowerMeUp on offsec.tools
PowerMeUp

A small library of powershell scripts for post exploitation that you may need or use!

Kraken on offsec.tools
Kraken

A modular multi-language webshell.

Reverse Shell Generator on offsec.tools
Reverse Shell Generator

A tool to generate various ways to do a reverse shell.

phpsploit on offsec.tools
phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.

LAZYPARIAH on offsec.tools
LAZYPARIAH

Generate reverse shell payloads on the fly.

PowerSploit on offsec.tools
PowerSploit

A PowerShell Post-Exploitation Framework.

reDuh on offsec.tools
reDuh

Create a TCP circuit through validly formed HTTP requests.

reGeorg on offsec.tools
reGeorg

Pwn a bastion webserver and create SOCKS proxies through the DMZ.

weevely3 on offsec.tools
weevely3

Weaponized web shell.

ShellPop on offsec.tools
ShellPop

Pop shells like a master.

Print-My-Shell on offsec.tools
Print-My-Shell

Automate the process of generating various reverse shells.

pwncat on offsec.tools
pwncat

Netcat on steroids with many extra features.

AutoSploit on offsec.tools
AutoSploit

Automated Mass Exploiter.

BeRoot on offsec.tools
BeRoot

Multiplaform privilege escalation project.

JSgen on offsec.tools
JSgen

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

Injectify on offsec.tools
Injectify

Perform advanced MiTM attacks on websites with ease.

SiteBroker on offsec.tools
SiteBroker

Utility for information gathering and penetration testing automation.

RevShells on offsec.tools
RevShells

Hosted Reverse Shell generator with a ton of functionality.

Shelling on offsec.tools
Shelling

A comprehensive OS command injection payload generator.

JSShell on offsec.tools
JSShell

An interactive multi-user web JS shell.

Evil SQL Client on offsec.tools
Evil SQL Client

Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.

Gopherus on offsec.tools
Gopherus

Generates gopher link for exploiting SSRF and gaining RCE in various servers.

LFI Suite on offsec.tools
LFI Suite

Totally Automatic LFI Exploiter and Scanner.