search

t3l3machus / Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
Other
3.72k stars 598 forks source link

The problem of switching directory after session goes in #95

Closed ffsfwnuiaww closed 1 year ago

ffsfwnuiaww commented 1 year ago
image
ffsfwnuiaww commented 1 year ago

i test in hoaxshell ，It is found that it cannot switch the directory normally

and test in netcat，It is found that it can switch the directory normally

image
t3l3machus commented 1 year ago

This has to do with the stability of a given shell session. Unstable reverse shells might not support directory traversal. All hoaxshell reverse shells are marked as unstable because they are. You should prefer Villain's TCP handler which was designed to accept various reverse shell connections that may originate from netcat/msfvenom/script commands and executables. Still not perfect but much better than hoaxshell