Blog

The difference between a webshell and a reverse shell, why testers often use both, and how each one looks to a defender.

How to pick a listener for authorized reverse shell testing, from netcat to ncat and socat, without overbuilding the lab.

How a Node.js reverse shell works by piping a spawned shell through a TCP socket, the one-liner, and when Node is the interpreter you can rely on.

How a Java reverse shell works via Runtime.exec wrapping a bash payload, the pure-socket alternative, and why it shows up in JSP and deserialization bugs.

Reverse shell upgrades fix PTY, signals, line editing, and job control. Here is what matters in authorized testing.

How a gawk reverse shell uses the /inet/tcp special file, the one-liner, and why it only works with GNU awk — a true last-resort payload.

Why reverse shell commands break when they pass through parsers, wrappers, CI variables, and web inputs.

PowerShell reverse shell testing comes with execution policy, logging, AMSI, quoting, and noisy process telemetry.

When you have SSH access, a reverse SSH tunnel (ssh -R) gives a stable, encrypted, fully interactive session — and a way to pivot — that beats a fragile netcat shell.