OffensiveReverseShellCheatSheet - Collection of reverse shells for red team operatio

项目说明

Offensi Shell (Cheat Sheet)

!GitHub stars !GitHub forks !GitHub watchers</br>
!GitHub commit activity (branch) !GitHub contributors

Welcome to the Offensi Shell (Cheat Sheet), a comprehensi curated specifically for Red Team Operations, Penetration Testing, and Security Research. This repository contains a of reverse shell payloads crafted in different languages and configurations to suit diverse scenarios and en.

> [!WARNING]
> All content in this repository is intended strictly for educational purposes and authorized security testing in controlled en only, whether real or CTF.

Table of Contents

Bash

Netcat

- Netcat Linux
- Netcat Windows

cURL

Wget

Node-RED

WebShells

- Exif Data
- ASP WebShell
- PHP WebShell
- GET
- POST
- Chain Filter
- Log Poisoning WebShell
- SSH
- FTP
- HTTP
- RSYNC

Server Side Template Injection (SSTI)</kbd>

UnrealIRCd</kbd>

Exif Data</kbd>

Shellshock</kbd>

- SSH
- HTTP
- HTTP 500 Internal Ser

CMS

- WordPress
- October
- Jenkins
- Windows
- Linux

Perl

Python

Python3

PHP

Ruby

Xterm

Ncat

Socat

PowerShell

Awk

Gawk

Golang

Telnet

Java

Node

Msfvenom

- Web Payloads
- PHP
- WAR (Tomcat)
- JAR
- JSP
- ASPX
- Linux Payloads
- Listener Netcat
- Listener Metasploit Multi Handler
- Windows Payloads
- Listener Netcat
- Listener Metasploit Multi Handler

---

<kbd>Bash</kbd>

<kbd>TCP</kbd>

<kbd>-i</kbd>

<kbd>196</kbd>

<kbd>read line</kbd>

<kbd>5</kbd>

<kbd>-c</kbd>

<kbd>UDP</kbd>

---

<kbd>Netcat</kbd>

<kbd>Netcat Linux</kbd>

<kbd>-e</kbd>

<kbd>-c</kbd>

<kbd>NO -e -c</kbd>

<kbd>BusyBox</kbd>

<kbd>fifo</kbd>

---

<kbd>Netcat Windows</kbd>

---

---

<kbd>cURL</kbd>

---

<kbd>Wget</kbd>

---

<kbd>Node-RED</kbd>

---

<kbd>WebShells</kbd>

<kbd>Exif Data WebShell</kbd>

<kbd>ASP WebShell</kbd>

<kbd>PHP WebShell</kbd>

<kbd>Chain Filter</kbd>

chain filter"

<kbd>GET</kbd>

<kbd>POST</kbd>

---

<kbd>Log Poisoning WebShell</kbd>

<kbd>Log Poisoning SSH</kbd>

/var/log/auth.log

file.php?file=/var/log/auth.log&cmd=id

---

<kbd>Log Poisoning FTP</kbd>

/var/log/.log

file.php?file=/var/log/.log&cmd=id

---

<kbd>Log Poisoning HTTP</kbd>

Apache2: /var/log/apache2/access.log
Nginx: /var/log/nginx/access.log

Apache2: file.php?file=/var/log/apache2/access.log&cmd=id
Nginx: file.php?file=/var/log/nginx/access.log&cmd=id

---

<kbd>Log Poisoning RSYNC</kbd>

/var/log/rsyncd.log

file.php?file=/var/log/rsyncd.log&cmd=id

---

<kbd>Server Side Template Injection</kbd>

---

<kbd>UnrealIRCd</kbd>

---

<kbd>Exif Data Reverse Shell</kbd>

---

<kbd>Shellshock</kbd>

<kbd>Shellshock SSH</kbd>

---

<kbd>Shellshock HTTP</kbd>

---

<kbd>Shellshock HTTP 500 Internal Ser</kbd>

---

<kbd>CMS</kbd>

<kbd>WordPress</kbd>

<kbd>Create Plugin (Reverse Shell)</kbd>

<kbd>Content</kbd>

<kbd>Compress</kbd>

<kbd>Steps</kbd>

* Plugins

* Add New

* Upload Plugin

* Install Now

* Activate Plugin

---

<kbd>October</kbd>

---

<kbd>Jenkins</kbd>

<kbd>Jenkins Windows</kbd>

<kbd>Netcat (Method 1)</kbd>

<kbd>Netcat (Method 2)</kbd>

<kbd>CMD</kbd>

<kbd>PowerShell</kbd>

<kbd>Jenkins Linux</kbd>

<kbd>Netcat (Method 1)</kbd>

<kbd>Netcat (Method 2)</kbd>

<kbd>Bash</kbd>

---

<kbd>Perl</kbd>

---

<kbd>Python</kbd>

<kbd>Sh</kbd>

<kbd>Bash</kbd>

---

<kbd>Python3</kbd>

<kbd>Sh</kbd>

<kbd>Bash</kbd>

---

<kbd>PHP</kbd>

---

<kbd>Ruby</kbd>

---

<kbd>Xterm</kbd>

---

<kbd>Ncat</kbd>

<kbd>TCP</kbd>

<kbd>UDP</kbd>

---

<kbd>Socat</kbd>

---

<kbd>PowerShell</kbd>

---

<kbd>Awk</kbd>

---

<kbd>Gawk</kbd>

---

<kbd>Golang</kbd>

---

<kbd>Telnet</kbd>

---

<kbd>Java</kbd>

---

<kbd>Node</kbd>

---

<kbd>Msfvenom</kbd>

<kbd>Web Payloads</kbd>

<kbd>PHP Payload</kbd>

<kbd>War Payload</kbd>

<kbd>JAR Payload</kbd>

<kbd>JSP Payload</kbd>

<kbd>ASPX Payload</kbd>

---

<kbd>Windows Payloads</kbd>

<kbd>Windows Listener Netcat</kbd>

<kbd>x86 - Shell</kbd>

<kbd>x64 - Shell</kbd>

<kbd>Windows Listener Metasploit Multi Handler</kbd>

<kbd>x86 - Meterpreter</kbd>

<kbd>x64 - Meterpreter</kbd>

<kbd>x86 - Shell</kbd>

<kbd>x64 - Shell</kbd>

---

<kbd>Linux Payloads</kbd>

<kbd>Linux Listener Netcat</kbd>

<kbd>x86 - Shell</kbd>

<kbd>x64 - Shell</kbd>

---

<kbd>Linux Listener Metasploit Multi Handler</kbd>

<kbd>x86 - Meterpreter</kbd>

<kbd>x64 - Meterpreter</kbd>

<kbd>x86 - Shell</kbd>

<kbd>x64 - Shell</kbd>

---

项目信息

开发语言：PowerShell

Star 数：547

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Collection of reverse shells for red team operations.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。