Skip to content

rMETAshell takes a shell command and an image, video or text file as input. It then injects the command into the file using metadata comments. After injection, it generates a one-liner execution method for retrieving and executing the injected command from a remote location.

License

Notifications You must be signed in to change notification settings

git5loxosec/rMETAshell

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Visitors

MAJOR UPDATE: 01:38:43 UTC Monday, January 29, 2024

rMETAshell is a versatile command-line tool designed to inject commands into media and text files, facilitating the creation of one-liner execution methods for various file formats. It offers an easy way to embed commands such as reverse shells or custom scripts into files like pictures or videos, which can then be used for various purposes, including security testing and penetration testing.

FEATURED ON LINUXHUNTERS.COM Jan 13, 2024 ARTICLE!

THIS PROJECT IS UNDER CONSTANT DEVELOPMENT!

Sponsor Kali Linux Compatible Language Static

Screenshot_2024-01-28_20_45_28 Inject your prefered command into any media file or text-based file, like jpg, mp4 and txt!

Screenshot_2024-01-28_20_45_50 5 new base64 encoding and decoding methods for your generated one-liner!

Screenshot_2024-01-28_20_46_07 One-liner generated with base64 encoding.

Screenshot_2024-01-28_20_47_00 Run it on a remote machine.

Screenshot_2024-01-28_20_47_13 Executed and running without problems, the generated one-liner was a success!

Screenshot_2024-01-28_20_47_31 And Have fun, responsibly!

Features

  • Command injection into media and text files.
  • Automatic generation of one-liner execution methods.
  • Compatibility with various image, video, and text file formats.
  • Option to encode the one-liner using base64.
  • Multiple decoding methods for the base64-encoded one-liner.
  • Easy-to-use command-line interface.

Installation

Clone the repository

git clone https://github.com/git5loxosec/rMETAshell

Navigate to the rMETAshell directory

cd rMETAshell

Make the script executable

chmod +x rMETAshell.sh

Usage

./rMETAshell.sh [OPTIONS] <command> <filename> <URL>

Options:

-h, --help Display help. -e, --encode Encode using base64.

Arguments:

Command for injection into the media file. Name of the file to inject command (e.g. example.png). Server URL (e.g. http://www.example.com). File Format Compatibility Lists of compatible media and text file formats are provided to ensure reliable injection.

Video tutorial:

rMETAshell tutorial

Contributing

Contributions are what make the open-source community an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

Disclaimer

rMETAshell is intended for educational and ethical use only. Any misuse of this tool for malicious activities is strictly prohibited.

About

rMETAshell takes a shell command and an image, video or text file as input. It then injects the command into the file using metadata comments. After injection, it generates a one-liner execution method for retrieving and executing the injected command from a remote location.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Sponsor this project

Packages

No packages published

Languages