Shell-Eggs.siteThe Catalog
54 shells. Eight directions. One startup variable.
Pick any combination - a hardened SSH server plus a tmux session, a TLS bind shell plus a Python reverse shell. The first ported shell takes the panel-assigned port; extras get their own. Full connection guides for every entry live in SHELLs.md.
ssh
OpenSSH Server
Hardened sshd: keys, passwords, SFTP, ciphers tuned
default port 22
ssh-cert
OpenSSH CA Certificates
SSH user + host certificates signed by a container-local CA
default port 22
ssh-hardened
OpenSSH Hardened
Keys-only, strong ciphers, no root login, blinding + rate limit
default port 22
dropbear
Dropbear SSH
Tiny SSH for low-RAM containers (ECC + RSA keys)
default port 22
telnetd
Telnet Server
Classic plaintext remote terminal (RFC854) - lab use
default port 23
mosh-server
Mosh Server
Roaming low-latency shell over UDP (survives IP changes)
default port 60000
tmux
Tmux Session
Persistent terminal multiplexer, attach/detach anywhere
no inbound port
screen
GNU Screen
Classic session multiplexer with hardstatus bar
no inbound port
zellij
Zellij Session
Modern multiplexer with layouts, panes and session resurrection
no inbound port
ssh-local
SSH Local Tunnel (-L)
Forward a local port through this container (encrypted pipe)
default port 2222
ssh-remote
SSH Remote Tunnel (-R)
Expose this container's port on YOUR machine via sshd gatewaying
default port 2222
ssh-dynamic
SSH SOCKS Proxy (-D)
SOCKS5 proxy through the container - route any app through it
default port 2222
ssh-x11
SSH X11 Forwarding
Run remote GUI apps from the container on your X display
default port 2222
rsync-ssh
Rsync over SSH
Fast delta file sync over the encrypted SSH channel
default port 22
sshfs
SSHFS Filesystem
Mount the container workspace as a local folder via SFTP
default port 22
bash-tcp
Bash /dev/tcp Reverse
Pure bash reverse shell - zero external dependencies
default port 4444
bash-udp
Bash /dev/udp Reverse
UDP flavor of the bash device reverse shell
default port 4444
python
Python Reverse Shell
socket() + subprocess reverse shell (stable, reconnects)
default port 4444
python-pty
Python PTY Reverse
Python reverse shell with full PTY (arrow keys, ctrl-c)
default port 4444
php
PHP fsockopen Reverse
PHP proc_open reverse shell from any PHP runtime
default port 4444
php-pentest
PHP Pentestmonkey-style
Classic full-featured PHP reverse shell script
default port 4444
perl
Perl Socket Reverse
Core perl Socket module reverse shell
default port 4444
ruby
Ruby TCPSocket Reverse
Ruby TCPSocket + system() reverse shell
default port 4444
lua
Lua Socket Reverse
Lua io.popen loop reverse shell
default port 4444
node
Node.js net.Reverse
Node.js child_process reverse shell
default port 4444
powershell
PowerShell TCP Reverse
.NET TCPClient reverse shell for pwsh runtimes
default port 4444
golang
Golang Reverse Shell
Go source, compiled on the fly into a static binary
default port 4444
groovy
Groovy Reverse Shell
Groovy/Jenkins console reverse shell
default port 4444
java
Java Reverse Shell
Plain Java socket reverse shell, compiled at boot
default port 4444
awk
Gawk Reverse Shell
/inet/tcp gawk one-file reverse shell (surprising but real)
default port 4444
nc
Netcat Reverse
Classic TCP reverse via FIFO relay (openbsd + traditional)
default port 4444
nc-udp
Netcat UDP Reverse
UDP reverse shell (listener must speak first)
default port 4444
ncat
Ncat Reverse
Nmap's netcat with --exec and reconnect
default port 4444
socat
Socat Reverse (pty)
Fully interactive socat EXEC pty reverse shell
default port 4444
cryptcat
Cryptcat Reverse
Netcat with twofish encryption (-k shared key)
default port 4444
openssl-rs
OpenSSL TLS Reverse
TLS-wrapped shell via s_client; pairs with socat OPENSSL-LISTEN
default port 4444
socat-tls
Socat TLS Reverse
socat OPENSSL reverse shell with auto-generated client cert
default port 4444
ncat-ssl
Ncat SSL Reverse
ncat --ssl reverse shell (nmap TLS stack)
default port 4444
wssh
Websocket Shell (wssh)
Python websocket shell client over ws:// (covert, 80/443-like)
default port 7681
dnscat
DNS Tunnel Shell
C2-over-DNS client (dnscat2-style) for egress-restricted nets
no inbound port
icmp-shell
ICMP Shell
Reverse shell inside ICMP echo payloads (icmpsh-style)
no inbound port
nc-bind
Netcat Bind Shell
nc -lp /bin/sh - classic bind shell on demand
default port 5555
socat-bind
Socat Bind Shell (pty)
Full PTY bind shell via socat TCP-LISTEN
default port 5555
openssl-bind
OpenSSL TLS Bind
TLS bind shell: socat OPENSSL-LISTEN + bash
default port 5555
php-bind
PHP Bind Shell
PHP socket_accept bind shell
default port 5555
python-bind
Python Bind Shell
Python socket bind + PTY shell
default port 5555
ttyd
ttyd Web Terminal
Full xterm.js terminal in your browser (TLS optional)
default port 7681
gotty
GoTTY Web Terminal
Go static binary web terminal - no install on client
default port 8080
php-webshell
PHP Web Shell (HTTP)
POST cmd= PHP HTTP exec shell served by php -S
default port 8080
node-webshell
Node.js Web Shell
Node http server exec shell - cmd= query or POST body
default port 8080
ssh-debug
SSH Debug Session
Foreground sshd -ddd + client -vvv recipe for auth issues
default port 2222
strace-shell
Strace Session Shell
Login shell wrapper that straces every syscall to file
no inbound port
tcpdump-shell
Tcpdump Capture Shell
Bind a shell that also captures traffic to pcap for review
no inbound port
socat-probe
Socat Probe Relay
Raw TCP relay + hex dump for protocol debugging
default port 9000