Rolling Shells – Login to Unprotected Shells Randomly Using SHODAN

What are open shells?

An “open shell” is a term often used in cybersecurity to refer to a remote shell that is unintentionally left open or exposed by a system or device. 

This vulnerability can occur due to various factors, including misconfigurations, weak security settings, or software bugs. 

Malicious actors often exploit open shells to gain unauthorized access to a system or network, making the identification and closure of these vulnerabilities crucial for maintaining security

Introduction

Rolling shells is a tool that makes the identification and cataloging of open shells easier and more efficient. 

It accomplishes this by utilizing the Shodan API, a search engine that indexes devices connected to the internet. Shodan provides detailed information about these devices, including open ports, banners, and services running on them.

Key Features of Rolling Shells:

Shodan Integration: It leverages the Shodan API to search for devices with open shells on the internet. This integration allows cybersecurity professionals to quickly identify potential vulnerabilities.

Automated Scanning: The tool automates the scanning process, making it easy to search for open shells across a wide range of devices and services.

Data Collection and Storage: Collects information about open shells, such as IP addresses, ports, and banners, and saves this data for future analysis.

Random Selection: Users can choose to save the information about open shells and access it at a later time. The tool can also select a random open shell from the stored list for further investigation.

Report Generation: Can generate detailed reports about identified open shells, making it easier to share findings with colleagues or superiors.

Installation

git clone https://github.com/DeyaaMuhammad/rollingshells

Usage

• Go the tool dir

cd rollingshells

• run the tool

python3 rs.py

Security Implications

Rolling Shells is a versatile tool for both red and blue teams in the realm of cybersecurity. 

Red teams can use it to identify open shells, potentially exploiting them for testing security measures or demonstrating vulnerabilities. 

Blue teams, on the other hand, can employ the tool to proactively search for and secure open shells to protect their systems.

It’s important to note that rolling shells are meant to be used responsibly and ethically. 

Unauthorized access to systems is illegal and unethical, and the tool should only be used in environments where the user has proper authorization

Please consider following and supporting us to stay updated with the latest info