最近在做测试的时候，发现一台靶机上有一个应用引起了我的好奇，penelope，进程显示它默认监听了4444端口，就这个端口，正经人是不会用的，哈哈哈哈哈，所以我就搜索了一下，原来是一个高级的shell处理工具，看来又该学习了，没用过。
Penelope 是一款面向渗透测试人员和 CTF 玩家的现代化 shell 处理工具。它比基本的 netcat 监听器功能更强大，增加了自动 PTY 升级、会话管理、日志记录、文件传输和辅助模块等功能。
debian/ubuntu/kali安装
sudo apt update sudo apt install penelope
或者直接pipx
pipx install penelope-shell-handler
| | |
|---|
| | |
| Real-time terminal resize | | |
| | |
| Download remote files/folders | | |
| Upload local/HTTP files/folders | | |
| In-memory local/HTTP script execution with real-time output downloading | | |
| | |
| Spawn shells on multiple tabs and/or hosts | | |
| Auto-maintain N active shells per host (re-spawn on death) | | |
注意:目前不支持通信加密，windows上支持不太好，但是我测试了一下还可以。
●●●CODE
penelope # Listening for reverse shells on 0.0.0.0:4444penelope -p 5555 # Listening for reverse shells on 0.0.0.0:5555penelope -p 4444,5555 # Listening for reverse shells on 0.0.0.0:4444 and 0.0.0.0:5555penelope -i eth0 -p 5555 # Listening for reverse shells on eth0:5555penelope -a # Listening for reverse shells on 0.0.0.0:4444 and show sample reverse shell payloads penelope -c target -p 3333 # Connect to a bind shell on target:3333 penelope ssh user@target # Get a reverse shell from target on local port 4444penelope -p 5555 ssh user@target # Get a reverse shell from target on local port 5555penelope -i eth0 -p 5555 -- ssh -l user -p 2222 target # Get a reverse shell from target on eth0, local port 5555 (use -- if ssh needs switches) penelope -s <File/Folder> # Share a file or folder via HTTP
下载链接安排:https://github.com/brightio/penelope
因为在外面的缘故，编辑太多不太方便，今天就这样,忘了，大家一定要遵守网络安全法，渗透测试必须在合法合规的环境下进行！
