JoelGMSec/PyShell JoelGMSec/PyShell

  • Stars
    star
    287
  • Rank 144,232 (Top 3 %)
  • Language
    Python
  • License
    GNU General Publi...
  • Created about 3 years ago
  • Updated 3 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
JoelGMSec/PyShell
github

JoelGMSec

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Multiplatform Python WebShell

PyShell

PyShell

PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server.

Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell.

Requirements

  • Python 3
  • Install requirements.txt

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PyShell

Usage

./PyShell.py -h


  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ โ–“โ–ˆโ–ˆ   โ–‘โ–ˆโ–ˆ  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ  โ–ˆโ–ˆโ–‘ โ–ˆโ–ˆ โ–“โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ  โ–ˆโ–ˆโ–“     โ–ˆโ–ˆโ–“
 โ–“โ–ˆโ–ˆโ–‘  โ–ˆโ–ˆโ–’โ–ˆโ–ˆโ–‘   โ–ˆโ–ˆโ–’โ–ˆโ–ˆ    โ–’ โ–“โ–ˆโ–ˆ  โ–ˆโ–ˆโ–’โ–“โ–ˆโ–ˆ    โ–“โ–ˆโ–ˆโ–’    โ–“โ–ˆโ–ˆโ–’
 โ–“โ–ˆโ–ˆโ–‘  โ–ˆโ–ˆโ–’ โ–ˆโ–ˆ  โ–ˆโ–ˆโ–‘โ–‘ โ–“โ–ˆโ–ˆโ–ˆ   โ–’โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–’โ–ˆโ–ˆโ–ˆโ–ˆ  โ–’โ–ˆโ–ˆโ–‘    โ–’โ–ˆโ–ˆโ–‘
 โ–’โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ โ–’ โ–‘โ–ˆโ–ˆโ–ˆโ–ˆโ–“โ–‘  โ–’   โ–ˆโ–ˆโ–’โ–‘โ–ˆโ–ˆ โ–‘โ–ˆโ–ˆ โ–’โ–ˆโ–ˆ    โ–’โ–ˆโ–ˆโ–‘    โ–’โ–ˆโ–ˆโ–‘
 โ–’โ–ˆโ–ˆโ–’ โ–‘  โ–‘ โ–‘ โ–ˆโ–ˆโ–’โ–“โ–‘โ–’โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–’โ–’โ–‘โ–ˆโ–ˆโ–’โ–‘โ–ˆโ–ˆโ–“โ–‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–’โ–‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–’โ–‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–’
 โ–’โ–ˆโ–ˆโ–‘ โ–‘  โ–‘  โ–ˆโ–ˆโ–’โ–’โ–’ โ–’ โ–’โ–“โ–’ โ–’ โ–‘ โ–’ โ–‘โ–‘โ–’โ–‘โ–’โ–‘โ–‘ โ–’โ–‘ โ–‘โ–‘ โ–’โ–‘โ–“  โ–‘โ–‘ โ–’โ–‘โ–“  โ–‘
 โ–‘โ–’ โ–‘     โ–“โ–ˆโ–ˆ โ–‘โ–’โ–‘ โ–‘ โ–‘โ–’    โ–‘ โ–’ โ–‘ โ–‘ โ–‘ โ–‘ โ–‘  โ–‘โ–‘ โ–‘ โ–’  โ–‘โ–‘ โ–‘ โ–’  โ–‘
 โ–‘โ–‘   โ–‘   โ–’ โ–’ โ–‘โ–‘  โ–‘  โ–‘  โ–‘   โ–‘  โ–‘โ–‘ โ–‘         โ–‘ โ–‘     โ–‘ โ–‘
 โ–‘        โ–‘             โ–‘      โ–‘      โ–‘       โ–‘          โ–‘

  -------------- by @JoelGMSec & @3v4Si0N ---------------

usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-ifs] [-su] [-ps] url method

positional arguments:
  url                   Webshell URL
  method                HTTP Method to execute command (GET or POST)

optional arguments:
  -h, --help            show this help message and exit
  -a AUTH, --auth AUTH  Authorization header to use on each request
  -c COOKIES, --cookies COOKIES
                        Cookie header to use on each request
  -p PARAM, --param PARAM
                        Parameter to use with custom WebShell
  -pi, --pipe           Pipe all commands after parameter
  -ifs, --ifs           Replace all white spaces with Internal Field Separator
  -su, --sudo           Sudo command execution (Only on Linux hosts)
  -ps, --PowerShell     PowerShell command execution (Only on Windows hosts)

The detailed guide of use can be found at the following link:

https://darkbyte.net/pyshell-multiplatform-python-webshell

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gรกmez Molina (@JoelGMSec) and Hรฉctor de Armas Padrรณn (@3v4si0n).

Special thanks to @Davidc96 for dynamic path function.

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net.

Support

You can support my work buying me a coffee:

buymeacoffe

More Repositories

1

AutoRDPwn

The Shadow Attack Framework
PowerShell
1,039
star
2

EvilnoVNC

Ready to go Phishing Platform
JavaScript
706
star
3

PSRansom

PowerShell Ransomware Simulator with C2 Server
PowerShell
439
star
4

Invoke-Stealth

Simple & Powerful PowerShell Script Obfuscator
PowerShell
392
star
5

Cloudtopolis

Zero Infrastructure Password Cracking
PowerShell
377
star
6

HTTP-Shell

MultiPlatform HTTP Reverse Shell
PowerShell
213
star
7

PSAsyncShell

PowerShell Asynchronous TCP Reverse Shell
PowerShell
149
star
8

Invoke-DNSteal

Simple & Customizable DNS Data Exfiltrator
PowerShell
105
star
9

LeakSearch

Search & Parse Password Leaks
Python
104
star
10

FakeDataGen

Full Valid Fake Data Generator
Python
82
star
11

AzureGraph

Azure AD enumeration over MS Graph
PowerShell
78
star
12

Invoke-Transfer

PowerShell Clipboard Data Transfer
PowerShell
68
star
13

Thunderstorm

Modular framework to exploit UPS devices
Python
61
star
14

PowerGram

Multiplatform Telegram Bot in pure PowerShell
PowerShell
47
star
15

Darkbyte

Repository of tools used in my blog
C
46
star
16

MyTalks

Collection of my talks and workshops about hacking & cybersecurity
23
star
17

AutoRDPnw

The Shadow Attack Framework
8
star
18

Evil-IRC

Old School IRC Backdoor
Perl
3
star
19

JoelGMSec

https://darkbyte.net/aboutme
3
star