reverse-shell-techniques
Reverse shell techniques playbook. Use when establishing remote shells including language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer methods, PowerShell shells, and Windows payload generation.
Security Assessment
Detected risks:
About reverse-shell-techniques
An offensive-security playbook in the yaklang hack-skills collection, focused on establishing and stabilizing reverse shells during authorized penetration testing and red-team engagements. Per its description it surveys the common families of remote-shell techniques: language one-liners, encrypted channels via tools such as OpenSSL, socat, and ncat, web shells, upgrading a basic shell to a full interactive PTY, methods for transferring files to a target, PowerShell-based shells, and Windows payload generation. It is framed as an expert reference for operators who already have a foothold and need reliable, situation-appropriate command-and-control back to their machine. In a catalog context it is post-exploitation tooling used to demonstrate impact during an authorized assessment and to test whether egress filtering, EDR, and network monitoring detect outbound shell activity. Because reverse shells are a core offensive capability, the material should be used only within the scope of an engagement the tester is authorized to perform. Defenders can use awareness of these techniques to tune egress filtering, detect anomalous outbound connections and interactive PTY behavior, and harden systems against the shell-establishment and file-transfer methods described.
FAQ
What does this skill cover?
Techniques for establishing remote/reverse shells — language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer, PowerShell shells, and Windows payload generation.
When is it used?
During authorized penetration tests and red-team engagements, typically as post-exploitation once a foothold exists, to demonstrate impact and test detection.
Who is it for?
Experienced penetration testers and red-team operators working under explicit authorization.
Is authorization required?
Yes — reverse shells are a core offensive capability and must only be used within the scope of an authorized engagement.
How can defenders use it?
To tune egress filtering, detect anomalous outbound connections and interactive PTY behavior, and harden against the shell and file-transfer methods.
Install reverse-shell-techniques
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
yaklang/hack-skills