+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Hoaxshell - An Unconventional Windows Reverse Shell (/showthread.php?tid=6223669)
Hoaxshell - An Unconventional Windows Reverse Shell - ĐĮΜĘ - Oct 6, 2022
hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and possibly other AV solutions, solely based on http(s) traffic. The tool is easy to use, it generates it's own PowerShell payload and it supports encryption (ssl).
So far, it has been tested on fully updated Windows 11 Enterprise, Windows Server 2016 Datacenter and Windows 10 Pro boxes (see video and screenshots).
Important: As a means of avoiding detection, hoaxshell is automatically generating random values for the session id, URL paths and name of a custom http header utilized in the process, every time the script is started. The generated payload will work only for the instance it was generated for. Use the -g option to bypass this behaviour and re-establish an active session or reuse a past generated payload with a new instance of hoaxshell.
Check it out here: https://github.com/t3l3machus/hoaxshell
RE: Hoaxshell - An Unconventional Windows Reverse Shell - interbellum - Oct 8, 2022
Looks interesting! Will give this a shot soon.
RE: Hoaxshell - An Unconventional Windows Reverse Shell - webshell buyer - Apr 24, 2023
#wtb fresh shell
Need different IP
Can upload and edit
No need subdomain
My process：send domain list > chose > send shell >
check shell > work > pay PM
If you have, please dm
RE: Hoaxshell - An Unconventional Windows Reverse Shell - __Digital__ - Apr 26, 2023
Another great share from you sir, keep up the good work.