A Golang based webshell that uses websockets for the command channel
This tool is heavily based on the gorilla command example.
I've made some minor modifications that:
- Hard-code
/bin/shas the command to bind to the websocket - Support running the server on a user-specified port
- Embed the html content as b64 encoded string rather than using an external file (which is, arguably, more useful for red-teaming scenarios)
- Run the binary, specifying the port as a command-line argument:
./ws 8080 - Point a web browser at the IP address and port where the app is running (the app defaults to listening on every interface)
- Type commands into the form, and view the output (see example screenshot below)
If you don't care to compile this yourself, I release the program as binaries for
- Mac, Linux, and Windows; on
- x86, amd64, arm, and arm64.
Just grab them from the releases link and go.