RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.
Features
- Remote Command Execution
- Trafic masking (XORed insted of cleartext); for better results use port 443[1]
- Built-in File/Binary transfer (both ways) over the masked trafic
- Built-in UDP Flooding tool
- Built-in UDP Spoofing tool[2]
- Multiple/All Hosts management; order File/Binary transfer and UDP Flood from Multiple/All connected Hosts
- Modular Code Design to allow easy customization[3]
- Client script is tested and is compatible with PyInstaller (can be made into .exe)[4]
*[1]The idea for XORing as well as the skeleton for the client came from primalsecurity.net so if you like this pack of scripts you'll probably love what they do
*[2]UDP Spoofing uses RAW_SOCKETS so in order to utilize it, the client has to run on an OS that supports RAW_SOCKETS (most Unix-Based) and with root privilages. Finally, most of the ISPs have implementations in place that will either drop or re-structure spoofed packets
*[3]See EXPANDING for how you can easily add new functionality and customize RSPET to your needs
*[4]Again check primalsecurity.net's perfect blogpost about producing an .exe
RSPET_server.pyorRSPET_server_min.pyis situated at the attacker's machine and running to accept connectionsRSPET_client.pyorRSPET_client_min.pyis situated in the infected machine(s) and will initiate the connection and wait for input.
Execution:
- Server:
python RSPET_server.py (max_connections) - Client:
python RSPET_client.py server_ipAs always if you have any suggestion, bug report or complain feel free to contact me.
Todo
Fix logic bug where if a dirrect command to Host OS has no output Server displays command not recognised- Fix logic bug where if a dirrect command's to Host OS execution is perpetual the Server deadlocks
Add client version and type (min or full) as a property when client connects and atList_Hosts- Add client update mechanism (being worked on)
- Add UDP Reflection functionality (already in the workings)