Home

Kraken is a modular multi-language webshell focused on web post-exploitation and defense evasion. It supports three technologies (PHP, JSP and ASPX) and is core is developed in Python.

Kraken follows the principle of "avoiding command execution" by re-implementing it through the functionalities of the programming language in use. Kraken seeks to provide usability, scalability and improve the OPSEC of ongoing operations.

Although its main use is focused on offensive purposes (e.g. red teams, internal pentest), it is possible to use it by blue teams to evaluate existing defensive tools and configurations.

Kraken is developed by @secu_x11

---

• I. Home
• II. Support
  • Clients supported
  • Agents supported
  • Modules supported
    • Support on Linux
    • Support on Windows
  • Version testing
• III. Getting Started
  • Requirements
  • Installation
    • Installation on Linux
    • Installation on Windows
    • Installation on MacOS
  • Usage
    • Choosing the web technology
    • Choosing the environment
    • Deploying the environment
    • Modifying agent
    • Selecting a connection profile
    • Connection from client
  • Advanced Usage
    • Standard Mode
      • Using Java Agent
      • Using NET Agent
    • Command and control Mode
• IV. Contribute
  • Module contributions
    • Introduction
    • PHP Module Creation
      • PHP Template Structure
      • PHP Module Development
      • PHP Module Versioning
      • PHP Module Registration
    • Java Module Creation
      • Java Template Structure
      • Java Module Development
      • Java Module Versioning
      • Java Module Registration
    • NET Module Creation
      • NET Template Structure
      • NET Module Development
      • NET Module Versioning
      • NET Module Registration
  • Dispatcher contributions
  • Formater contributions
  • Environment contributions
  • Util contributions
• V. Internals
• VI. FAQ & Troubleshooting
  • Known bugs
• VII. Acknowledgments & References
  • Acknowledgments
  • References