README
¶
NesterShell
Reverse shell comfort, web shell simplicity.
Description
NesterShell is a custom PHP web shell handler that allows you to interact with web shells via the terminal, in a "reverse shell" kind of way. Its main goal is to address the shortcomings of web shells by implementing features like directory tracking and end-to-end encryption in cases where a reverse shell is not feasible. This allows you to enjoy a comfy command-line interface while interacting with a web shell.
Demo
Quick Start
- Download the latest binary for your platform.
- Launch NesterShell.
- Generate your first web shell.
- Deploy it to your target server.
- Log in to the session and start using the interactive shell.
Licenses
This project is distributed under the GNU GPLv3.
To handle input, it also uses the Liner library, which is distributed under the MIT license.
About
The source code of this project is entirely handwritten, its primary purpose being to help me learn Go. AI is only used in certain parts of the project, such as documentation and code comments.
Documentation
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package connection manages interactive shell connections to remote web shells.
|
Package connection manages interactive shell connections to remote web shells. |
|
command
Package command handles special commands for the interactive shell session.
|
Package command handles special commands for the interactive shell session. |
|
encryption
Package encryption provides AES encryption and decryption utilities.
|
Package encryption provides AES encryption and decryption utilities. |
|
request
Package request handles HTTP requests to remote web shells.
|
Package request handles HTTP requests to remote web shells. |
|
response
Package response handles decryption and parsing of web shell responses.
|
Package response handles decryption and parsing of web shell responses. |
|
response/code
Package code handles response code interpretation and output formatting.
|
Package code handles response code interpretation and output formatting. |
|
terminal
Package terminal handles the basic interactions after logging into a session
|
Package terminal handles the basic interactions after logging into a session |
|
Package database handles session storage and retrieval using CSV files.
|
Package database handles session storage and retrieval using CSV files. |
|
Package generation handles web shell generation and export.
|
Package generation handles web shell generation and export. |
|
generator
Package generator provides web shell template processing and variable substitution.
|
Package generator provides web shell template processing and variable substitution. |
|
template
Package template contains the web shell PHP payload template.
|
Package template contains the web shell PHP payload template. |
|
internal
|
|
|
b64
Package b64 provides base64 encoding and decoding utilities.
|
Package b64 provides base64 encoding and decoding utilities. |
|
menu
Package menu provides user interface utilities for input/output operations.
|
Package menu provides user interface utilities for input/output operations. |
|
password
Package password provides password hashing, verification, and key generation utilities.
|
Package password provides password hashing, verification, and key generation utilities. |
|
structure
Package structure defines the core data structures used throughout NesterShell.
|
Package structure defines the core data structures used throughout NesterShell. |
|
value
Package value contains application-wide constants and default values.
|
Package value contains application-wide constants and default values. |
|
Package intro handles the first-time user introduction and setup wizard.
|
Package intro handles the first-time user introduction and setup wizard. |
|
session
|
|
|
create
Package create handles the creation of new sessions.
|
Package create handles the creation of new sessions. |
|
edit
Package edit handles editing and deletion of existing sessions.
|
Package edit handles editing and deletion of existing sessions. |
|
field
Package field provides interactive field input validation and collection.
|
Package field provides interactive field input validation and collection. |
Click to show internal directories.
Click to hide internal directories.