Reverse shell techniques playbook. Use when establishing remote shells including language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer methods, PowerShell shells, and Windows payload generation.

SKILL: Reverse Shell Techniques — Expert Attack Playbook AI LOAD INSTRUCTION : Expert reverse shell techniques. Covers reverse/bind shell decisions, encrypted shells (OpenSSL, socat SSL, ncat), web shell patterns (PHP/ASPX/JSP), PTY upgrade sequences, file transfer methods, PowerShell download cradles, and msfvenom payload generation. Base models miss encrypted shell syntax, proper PTY stabilization, and platform specific transfer techniques. 0. RELATED ROUTING Before going deep, consider loading: [tunneling and pivoting](../tunneling and pivoting/SKILL.md) after shell access for network pivoting [linux privilege escalation](../linux privilege escalation/SKILL.md) or [windows privilege escalation](../windows privilege escalation/SKILL.md) after landing shell [windows av evasion](../windows av evasion/SKILL.md) when AV blocks shell payloads Quick Reference Also load [SHELL CHEATSHEET.md](./SHELL CHEATSHEET.md) when you need: Complete one liner reverse shells for 20+ languages Copy paste ready payloads with placeholder substitution 1. REVERSE vs BIND SHELL DECISION Factor Reverse Shell Bind Shell Firewall (egress) Works if outbound allowed Blocked by egress filtering Firewall (ingress) Not blocked Requires inbound access to victim NAT Works (victim connects out) Fails (can't reach victim behind NAT) Detection Outbound connection — less suspicious Listening port — easily detected Default choice Almost always preferred Only when no egress + have inbound 2. ENCRYPTED SHELLS OpenSSL Reverse Shell Socat Encrypted Shell Ncat SSL 3. WEB SHELLS PHP ASPX JSP Upload + Trigger Patterns 4. PTY UPGRADE SEQUENCE Standard Python Upgrade Alternative Upgrades 5. FILE TRANSFER METHODS Linux Windows 6. POWERSHELL REVERSE SHELLS 7. MSFVENOM PAYLOADS 8. DECISION TREE

reverse-shell-techniques