PythonAdvancedHTTPReverseShell

Advanced python HTTP reverse shell made for Hacking Competition purpose. I am not responsible of what you do with this tool or any consequence/damage that can occur if you use it for illegal purpose.

This reverse shell works on any network that have the port 80 open. That being said, It can be extremely usefull. It was tested in a closed network, not over the whole internet. However, It will work over the internet, all you have to do is change the variables values of "ATTACKER_IP" (AttackerSide.py) and "ATTACKER_IP_URL" (VictimSide.py). More details below.

Language:

• Tested in Python 3.6, should work in all Python 3 version.

Limitations:

• Obviously, this is HTTP protocol, meaning it is possible for someone to intercept the request and read them in plain text. I encoded every request except for file transfer with Base64, but I should either implement HTTPS or a custom encrypting algorithm combined with Base64 for optimal purpose.

• This reverse shell has no implemented persistancy. This is, however, not a major issue if you use this for Hacking competition purpose...

• It is in python, meaning that you need to compile it to be sure that it will execute on any machine, regardless if python is installed or not. It is simple to do, just Google it. But if you are reading this right now, you probably already know how.

Table of Contents:

• Setting up
  • Attacker side script
  • Victim side script
• Commands
  • Remotely upload a file to the victim side -> upload::{FILE_TO_UPLOAD_PATH}
  • Change the remote working directory of the victim side -> cd::{PATH}
  • Download a remote file to the attacker side -> get::{FILE_TO_GET_PATH}
  • Scan the ports of remote machine on the victim side -> scan::{IP_TO_SCAN}::{PORT_1},{PORT_2},{PORT_N}
  • Take a screenshot of the victim desktop -> screens

Installation

• Download the repository

• Install the requirements for the attacker side in the requirements_(AttackerSide).txt file (pip install -r requirements_(AttackerSide).txt)

• If you decided not to compile the VictimSide.py script, install the requirements for the victim side on the remote machine with the requirements_(VictimSide).txt file (pip install -r requirements_(VictimSide).txt)

• Happy Hacking.

Setting up :

Here is what you need to do to setup your hacking environment beyond installation for both the attacker side and the victim side.

Attacker Side script

For the Attacker Side, it's pretty straight foward:

• At the top of the script, change the "ATTACKER_IP" variable for your IP address (or Domain name, you know what you have to do)
• Unless you do some port fowarding and change the default connection port of the Victim Side script and do other manipulations, the variable "ATTACKER_PORT" should stay with the value "80".

Here is what the top of the script shoud look like on a closed network :

Victim Side script

Again, I strongly recommand you to learn how and compile the VictimSide.py script with the dependencies before sending it to your victim, otherwhise the victim will need to have python will all the dependencies installed in his/her machine (which is unlikely). Eitherway, you will need to do this crazy hard step before doing anything:

• At the top of the script, change "ATTACKER_IP_URL" by the Domain name / IP address of the attacker. The 'http://' prefix is important.

Here is what the top of the script shoud look like on a closed network :