{"id":20734947,"url":"https://github.com/matheuzsecurity/d3m0n1z3dshell","last_synced_at":"2025-05-16T04:02:25.655Z","repository":{"id":173424931,"uuid":"647076245","full_name":"MatheuZSecurity/D3m0n1z3dShell","owner":"MatheuZSecurity","description":"Demonized Shell is an Advanced Tool for persistence in linux.","archived":false,"fork":false,"pushed_at":"2025-01-05T13:56:51.000Z","size":15629,"stargazers_count":369,"open_issues_count":0,"forks_count":52,"subscribers_count":8,"default_branch":"main","last_synced_at":"2025-04-08T19:21:11.331Z","etag":null,"topics":["advanced-persistence","automated-persistence","backdoor","bash","linux","linux-persistence","persistence","red-team"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MatheuZSecurity.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-05-30T02:30:47.000Z","updated_at":"2025-04-06T06:50:35.000Z","dependencies_parsed_at":"2023-09-27T07:48:37.460Z","dependency_job_id":"f673266d-b8a2-42a4-b636-a7945d407544","html_url":"https://github.com/MatheuZSecurity/D3m0n1z3dShell","commit_stats":{"total_commits":116,"total_committers":7,"mean_commits":"16.571428571428573","dds":0.5258620689655172,"last_synced_commit":"bb747c13dded825efbba2895890fcb11b33a2aa1"},"previous_names":["matheuzsecurity/d3m0nz1n3dshell"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MatheuZSecurity%2FD3m0n1z3dShell","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MatheuZSecurity%2FD3m0n1z3dShell/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MatheuZSecurity%2FD3m0n1z3dShell/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MatheuZSecurity%2FD3m0n1z3dShell/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MatheuZSecurity","download_url":"https://codeload.github.com/MatheuZSecurity/D3m0n1z3dShell/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254464890,"owners_count":22075570,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["advanced-persistence","automated-persistence","backdoor","bash","linux","linux-persistence","persistence","red-team"],"created_at":"2024-11-17T05:33:47.981Z","updated_at":"2025-05-16T04:02:20.644Z","avatar_url":"https://github.com/MatheuZSecurity.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ch1 align=\"center\"\u003e「😈」About D3m0n1z3dShell \u003c/h1\u003e\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"carbon.png\"\u003e\u003c/p\u003e\n\nDemonized Shell is an Advanced Tool for persistence in linux.\n\n### Install\n\n```\ngit clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git\ncd D3m0n1z3dShell\nchmod +x demonizedshell.sh\nsudo ./demonizedshell.sh\n```\n\n### One-Liner Install\n\nDownload D3m0n1z3dShell with all files:\n```\ncurl -L https://github.com/MatheuZSecurity/D3m0n1z3dShell/archive/main.tar.gz | tar xz \u0026\u0026 cd D3m0n1z3dShell-main \u0026\u0026 sudo ./demonizedshell.sh\n```\n\nLoad D3m0n1z3dShell statically (without the static-binaries directory):\n```\nsudo curl -s https://raw.githubusercontent.com/MatheuZSecurity/D3m0n1z3dShell/main/static/demonizedshell_static.sh -o /tmp/demonizedshell_static.sh \u0026\u0026 sudo bash /tmp/demonizedshell_static.sh\n```\n\n### Demonized Features\n\n* Auto Generate SSH keypair for all users\n* APT Persistence \n* Crontab Persistence\n* Systemd User level\n* Systemd Root Level\n* Bashrc Persistence\n* Privileged user \u0026 SUID bash\n* LKM Rootkit Modified, Bypassing rkhunter.\n* LKM Rootkit With file encoder. persistent icmp backdoor and others features.\n* ICMP Backdoor \n* LD_PRELOAD Setup PrivEsc\n* Static Binaries For Process Monitoring, Dump credentials, Enumeration, Trolling and Others Binaries.\n\n### Pending Features\n\n* [X] Process Injection\n* [x] install for example: curl github.com/test/test/demonized.sh | bash\n* [x] Static D3m0n1z3dShell\n* [x] ELF/Rootkit Anti-Reversing Technique\n* [ ] PAM Backdoor\n* [x] rc.local Persistence\n* [x] init.d Persistence\n* [x] motd Persistence\n* [x] Persistence via ACL.\n* [x] Reverse shell with a process name of your choice.\n* [ ] Udev persistence.\n* [ ] LKM Rootkit persistence after reboot.\n\nAnd other types of features that will come in the future.\n\n## Contribution\n\nIf you want to contribute and help with the tool, please contact me on twitter: @MatheuzSecurity\n\n## Note\n\n\u003e We are not responsible for any damage caused by this tool, use the tool intelligently and for educational purposes only.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmatheuzsecurity%2Fd3m0n1z3dshell","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmatheuzsecurity%2Fd3m0n1z3dshell","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmatheuzsecurity%2Fd3m0n1z3dshell/lists"}