A free reverse shell generator for authorized labs, CTFs and penetration tests. Set your IP and port once and get reverse and bind shell one-liners for Linux and Windows with the matching listener, Base64 or URL encoding, IPv6 variants and tunnel commands, ready to copy.
Presets from the reference generator plus chisel / ligolo / wscat. Adjust for your stack.
nc -lvnp 4444linux, mac - tags: linux, mac
// for authorized security testing only - always get explicit permission before running any payload or listener
During pentest and lab work, building payloads manually can be slow and error-prone. A generator helps quickly adapt host, port, shell, and syntax across common environments - useful for red-team labs, CTF scenarios, and defender validation in controlled environments.
Select a payload family and shell type.
Set host, port, and optional encoding/output format.
Copy payload and listener for your authorized lab workflow.
A reverse shell is a command shell that the target machine opens back to the tester's listener. Because the connection goes outbound, it passes firewalls that block inbound traffic, which is why pentesters use it after gaining code execution and why defenders watch for it.
Look for shells or script interpreters (bash, sh, powershell, cmd, python) making outbound network connections, shells spawned by web servers or office applications, and connections to unusual ports such as 4444. EDR process trees, Sysmon event ID 3 and egress filtering catch most of them; see the port lookup for 4444 and the LOLBAS matcher for living-off-the-land variants.
Only on systems you own or where you have explicit written authorization (lab, training, contracted pentest). Unauthorized use is illegal and unethical.
The generator covers common shells, listeners, Base64/hex/URI-style encodings, and many platform-specific snippets. Use the UI to pick host, port, and encoding for copy-paste commands.
No. It builds text you can copy. You run listeners and commands only in environments you control and are allowed to test.
It includes RSG-compatible patterns plus extra snippets. It is a helper catalog, not a replacement for your full offensive toolchain.