How do I use this reverse shell generator?

Enter your listener IP and port, pick a payload that matches the tools available on the target, copy it, and run it on the target. Start a matching listener on your own machine first, for example nc -lvnp 9001.

Yes. The reverse shell generator runs entirely in your browser, is free to use, and sends nothing to any server.

Reverse Shell Generator

Q: What is a reverse shell?

A reverse shell is a shell session where the target machine connects back to the attacker's listener, instead of the attacker connecting in. It is the standard way to get interactive command execution after exploiting a box, because the outbound connection usually slips past inbound firewall rules.

Q: What is the difference between a reverse shell and a bind shell?

A reverse shell makes the target connect out to you. A bind shell opens a listening port on the target that you connect to. Reverse shells are preferred because outbound traffic is less likely to be blocked.

Build a reverse shell, bind shell, MSFVenom payload, listener or TTY upgrade in one click. Set your IP and port, pick a payload for Bash, Python, PHP, Netcat, socat or PowerShell, and copy. Everything runs in your browser, nothing is sent anywhere.

IP / Interface

Port

Shell

Encoding

What is a reverse shell?

A reverse shell is a command shell where the target machine initiates the connection back to your listener, rather than you connecting into the target. After you exploit a vulnerability and gain code execution, a reverse shell is usually the fastest way to turn that into an interactive session, because the outbound connection from the target tends to pass through firewalls that would block an inbound one.

How to use this reverse shell generator

Set IP / Interface to your attacking machine's address and Port to the port you will listen on.
Start a matching listener on your box, for example nc -lvnp 9001 (grab the exact command from the Listener tab).
Pick a payload that uses a tool present on the target (Bash, Python, PHP, Netcat, socat, PowerShell, and more).
Hit Copy and run it on the target. Your listener catches the shell.
Use the TTY Upgrade tab to turn a basic shell into a fully interactive one.

Reverse shell vs bind shell

A reverse shell makes the target connect out to you. A bind shell instead opens a listening port on the target that you connect to. Reverse shells win in most engagements because egress filtering is usually looser than ingress filtering, but a bind shell is handy when the target cannot reach you directly.

Encoding: base64, URL and PowerShell

Some injection points mangle quotes, spaces or special characters. The Encoding options wrap the payload so it survives: base64 pipes a base64 blob into the shell, URL and Double URL percent encode it for web parameters, and PowerShell base64 emits a UTF-16LE encoded powershell -e command for Windows targets.

MSFVenom payloads and listeners

The MSFVenom tab builds the exact msfvenom command for Linux, Windows, macOS, PHP, JSP, WAR and ASPX targets, and the Listener tab gives you ready to paste nc, ncat, socat, pwncat, rlwrap and Metasploit multi/handler commands.

Use this reverse shell generator only on systems you own or are explicitly authorized to test (your own labs, CTFs, HackTheBox, or an engagement with a signed scope). Unauthorized access is illegal.

Missing an encoding or a feature?

Tell me what to add next, or report a bug. It goes straight to 0xDext3r.

>_ 0xDext3r