Exploring vshell: A Feature-Rich Remote Shell and Proxy Tool

Features

Supports eBPF client C2 (demo video: https://www.bilibili.com/video/BV1Vw411t78a)

Interactive virtual terminal

No compilation environment required; server generates client binaries directly

Single‑file server runtime, no special environment needed

Windows shellcode client support

Ultra‑fast proxy functionality

In‑memory execution of plugins in various formats (exe, .net, elf, dll, so, dylib)

WebSocket CDN relay support

Both forward and reverse connection modes

Proxy chaining and upstream proxy support

1. 支持ebpf客户端的 C2 (演示视频：https://www.bilibili.com/video/BV1Vw411t78a)
2. 完美的交互式虚拟终端
3. 无需编译环境，服务端直接生成客户端
4. 无需特殊运行环境，服务端单一文件运行
5. 支持 Windows shellcode 客户端
6. 超快的代理功能
7. 支持内存运行多种格式的插件（exe、.net、elf、dll、so、dylib）
8. 支持 WebSocket CDN 中转
9. 支持正、反向连接的客户端
10. 支持代理上线、代理链

Supported Traffic Protocols

TCP, UDP/KCP, WebSocket, DNS, DOH, and DOT are supported. WebSocket traffic can be relayed via a CDN. Communication is encrypted by default using a custom salt.

Management Functions

File management

Interactive virtual terminal (Linux, macOS, Windows)

Screen capture

Custom plugin execution

Add to system startup

NPS proxy integration

1. 文件管理
2. 交互式虚拟终端，Linux、MacOS、Windows都支持交互
3. 屏幕截屏
4. 自定义插件运行
5. 添加开机启动
6. NPS代理

Server‑Generated Clients

The server can generate client binaries that run without any parameters or configuration files. Four client types are provided: Stager reverse client, Stagerless reverse client, forward client, and eBPF forward client.

Stager反向客户端
Stagerless反向客户端
正向客户端
ebpf正向客户端

NPS Proxy Capability

All existing NPS proxy features are supported and can be configured directly through the web interface.

Project Repository

https://github.com/veo/vshell