Rs Shell Versions Save

A dirty PoC for a reverse shell with cool features in Rust

v0.1.6

3 months ago
  • It is now really possible to load and execute a shellcode on the client machine from a raw file presents on the server's disk, without writing it on the client's disk
  • The process hollowing function with indirect syscalls was broken. Now fixed
  • Some improvements on the download and upload features with the creation of new sub-functions dedicated to data transfer
  • More Clippy compliance

v0.1.5

4 months ago

This release adds the ability to perform all the sensitive Windows features with indirect syscalls instead of the high level Win32API.

  • load becomes syscalls
  • load -h becomes syscalls -h
  • load -s becomes syscalls -s
  • the AMSI bypass features also obtains its indirect syscalls version

Windows binary is still compiled with the stable-x86_64-pc-windows-msvc toolchain, and Linux one with stable-x86_64-unknown-linux-gnu.

v0.1.1

10 months ago

This release essentially improves parameters management. Now all the management is released by the clap crate that permits a proper parameters and arguments parsing.

Additionally, the certificate path and password can now be passed to the listener via command line parameters with --cert-path and --cert-pass.

v0.1.0

10 months ago

First release with the first features.

Windows and Linux binaries are present but only useful for the client side, since the certificate will be missing in the server code. Windows one is compiled with the stable-x86_64-pc-windows-msvc toolchain, and Linux one with stable-x86_64-unknown-linux-gnu.