Girsh : Automatically Spawn A Reverse Shell Fully Interactive

With Girsh, just run it and it will detect the OS and execute the correct commands to upgrade it to a full interactive reverse shell.

For a Linux

  • Get the terminal’s size
  • Spawn a tty using python2.7, python3 and python
  • Change the terminal as raw

For a Windows

  • Dowload ConPTY on the same machine and same port as the reverse shell server
  • Listen for getting the ConPTY reverse shell

Usage

Two modes are available:

  • Simple listener

go run main.go listener -h
Usage:

girsh listen [flags]

Flags:
-h, –help help for listen

Global Flags:
-d, –debug Debug output
-p, –port int port to listen (default is 1234) (default 1234)

  • Interactive

go run main.go -h
Generate a reverseshell oneliners (credits shellerator).
And listen then run stty raw -echo and send the python command to spawn a tty shell if it’s Linux
or use ConPTY if it’s windows


Usage:
girsh [flags]
girsh [command]

Available Commands:
help Help about any command
listen Listen and spawn a fully interactive for windows and linux client

Flags:
-d, –debug Debug output
-h, –help help for revshell
-p, –port int port to listen (default is 1234) (default 1234)

Demo

Linux

R K

Recent Posts

Cybersecurity – Tools And Their Function

Cybersecurity tools play a critical role in safeguarding digital assets, systems, and networks from malicious…

11 hours ago

MODeflattener – Miasm’s OLLVM Deflattener

MODeflattener is a specialized tool designed to reverse OLLVM's control flow flattening obfuscation through static…

11 hours ago

My Awesome List : Tools And Their Functions

"My Awesome List" is a curated collection of tools, libraries, and resources spanning various domains…

11 hours ago

Chrome Browser Exploitation, Part 3 : Analyzing And Exploiting CVE-2018-17463

CVE-2018-17463, a type confusion vulnerability in Chrome’s V8 JavaScript engine, allowed attackers to execute arbitrary…

11 hours ago

Chrome Browser Exploitation, Part 1 : Introduction To V8 And JavaScript Internals

The blog post "Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals" provides…

11 hours ago

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

The exploitation of CVE-2018-17463, a type confusion vulnerability in Chrome’s V8 JavaScript engine, relies on…

14 hours ago