What are y’all using to catch shells these days? Not talking about full C2, just something a cut above nc. I have a feeling folks have some favorite tools here, and I’ve recently had reason to need them.
From a red team standpoint, I haven’t done shells in the past couple of years. Too noisy and easily caught.
Have license for Cobalt Strike, not using that this go around. Too easily caught when operating. That being said, I haven’t dug into the nooks and crannies of the latest version.
Python. Look to python for really good fun and games for C2 and operations. It’s not as instrumented as cmd.exe or powershell. (At least w/the EDR we’re running, so ymmv.)
I’m very aware of Python, but that is not what I wanted! Sometimes you just want to catch a reverse shell from a web app RCE or HackTheBox challenge. And I want it auto-stabilized. If there’s a Python tool for that, rad. Recommendations welcome.
All good. I was anchored on the redteam tag.
For ctfs, I’ve pretty much stuck to nc or a Metasploit listener.
1 Like
I quickly did some searches in the HTB discord and it looks like Penelope might be the new thing now that calebstewart officially archived pwncat? I haven’t used it at all because I either use nc or a C2, and on very rare occasions I’ll write something quick in Python if want a forward shell sort of thing going on (example of what I’m talking about).
2 Likes
been using penelope myself for a bit, it’s very nice
1 Like
Thanks! I will give that a go on my next HTB foray.