redshell: interactive command prompt through proxychains on Cobalt Strike team server
RedShell
An interactive command prompt that executes commands through proxychains and automatically logs them on a Cobalt Strike team server.
General Features
RedShell includes commands for navigating the file system:
Additional commands can be run via the shell command or via the ‘!’ shortcut:
Commands are tracked and accessible via the history command:
It also includes tab-completion and clearing the terminal window via ctrl + l.
Installation
It runs on Python 3. It also requires a Cobalt Strike client installed on the system where it runs.
git clone https://github.com/Verizon/redshell.git
Install dependencies:
pip3 install -r requirements.txt
Install proxychains-ng:
apt install proxychains4
Make the agscript wrapper executable:
chmod +x agscript.sh
Usage
Start a socks listener on a beacon in your Cobalt Strike client.
Start RedShell:
Display help:
Set options:
Tutorial
Copyright 2020 Verizon
