Shellerator is a simple command-line tool aimed to help pentesters quickly generate one-liner reverse/bind shells in multiple languages (Bash, Powershell, Java, Python…).
This project is inspired by Print-My-Shell. I just rewrote it and added some options and glitter to it. The lists of reverse and bind shells are not perfect yet. I’ll work on this when I have the time to. I’ll be happy to review pull requests too.
Installation
The install is pretty simple, just clone this git and install the requirements.
git clone https://github.com/ShutdownRepo/shellerator
pip3 install –user -r requirements.txt
Usage
Usage is dead simple too.
Usage: shellerator.py [-h] [-b | -r] [-t TYPE] [-p LPORT] [-i LHOST]
Generate a bind/reverse shell
Optional arguments:
-h, –help show this help message and exit
-l, –list Print all the types of shells shellerator can generate
-b, –bind-shell Generate a bind shell (you connect to the target)
-r, –reverse-shell Generate a reverse shell (the target connects to you)(Default)
Bind shell options:
-t TYPE, –type TYPE Type of the shell to generate (Bash, Powershell, Java…)
-p LPORT, –port LPORT Listener Port
Reverse shell options:
-t TYPE, –type TYPE Type of the shell to generate (Bash, Powershell, Java…)
-i LHOST, –ip LHOST Listener IP address
-p LPORT, –port LPORT Listener Port
Also Read – Authelia : The Single Sign-On Multi-Factor Portal For Web Apps
Without CLI Menus
If you already know what type of shell you want to generate and don’t have time to select the language in the beautiful CLI menu, you can set it with the appropriate -t
(or --type
) option.
python3 shellerator.py [-r | -b] -t/–type bash -i/–ip 192.168.56.1 -p/–port 1337
To-Do List
Things to Add
Here are some things to add that I have in mind, I’ll work on that asap
Sources
Shells mostly come from the following links
shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation…
Extract and execute a PE embedded within a PNG file using an LNK file. The…
Embark on the journey of becoming a certified Red Team professional with our definitive guide.…
This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within…
This took me like 4 days (+2 days for an update), but I got it…
MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection. Its foundation is…