Back to Skills

reverse-shell-techniques

Reverse shell techniques playbook. Use when establishing remote shells including language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer methods, PowerShell shells, and Windows payload generation.

1,341stars181forksUpdated 7/11/2026

Security Assessment

Critical Risk(10/100)

Detected risks:

Remote Code Execution([SKILL.md] exec(, [SHELL_CHEATSHEET.md] exec()
Command Injection([SHELL_CHEATSHEET.md] subprocess.call, [SHELL_CHEATSHEET.md] child_process, [SHELL_CHEATSHEET.md] os.system)
Security Score10/100

About reverse-shell-techniques

An offensive-security playbook in the yaklang hack-skills collection, focused on establishing and stabilizing reverse shells during authorized penetration testing and red-team engagements. Per its description it surveys the common families of remote-shell techniques: language one-liners, encrypted channels via tools such as OpenSSL, socat, and ncat, web shells, upgrading a basic shell to a full interactive PTY, methods for transferring files to a target, PowerShell-based shells, and Windows payload generation. It is framed as an expert reference for operators who already have a foothold and need reliable, situation-appropriate command-and-control back to their machine. In a catalog context it is post-exploitation tooling used to demonstrate impact during an authorized assessment and to test whether egress filtering, EDR, and network monitoring detect outbound shell activity. Because reverse shells are a core offensive capability, the material should be used only within the scope of an engagement the tester is authorized to perform. Defenders can use awareness of these techniques to tune egress filtering, detect anomalous outbound connections and interactive PTY behavior, and harden systems against the shell-establishment and file-transfer methods described.

FAQ

What does this skill cover?

Techniques for establishing remote/reverse shells — language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer, PowerShell shells, and Windows payload generation.

When is it used?

During authorized penetration tests and red-team engagements, typically as post-exploitation once a foothold exists, to demonstrate impact and test detection.

Who is it for?

Experienced penetration testers and red-team operators working under explicit authorization.

Is authorization required?

Yes — reverse shells are a core offensive capability and must only be used within the scope of an authorized engagement.

How can defenders use it?

To tune egress filtering, detect anomalous outbound connections and interactive PTY behavior, and harden against the shell and file-transfer methods.

All Files

2 files
SKILL.md8.5 KB
View
SHELL_CHEATSHEET.md6.1 KB
View

Install reverse-shell-techniques

Download and extract the skill files to your .claude/skills/ directory.

Quick Setup:

  1. Copy the skill folder to .claude/skills/
  2. Claude will automatically detect and use the skill