English | 简体中文
Rshell is an open-source, multi-platform C2 framework written in Golang, designed for penetration testers and red/blue team engagements.
- Cross-Platform: Clients for Windows, Linux and macOS.
- Multi-Protocol: Listeners over WebSocket, TCP, KCP, HTTP and cloud object storage (OSS).
- Evasion & Stealth: Optional anti-sandbox execution password; in-memory execution (Execute Assembly, Inline Bin, Shellcode Injection, BOF).
- Interactive Management: Interactive terminal, file manager, process listing with AV identification, command execution.
- Modular Plugins: Rich plugin management with dynamic loading and execution.
- Decoupled Data: Custom or random per-client traffic keys, raising the bar for traffic analysis and reverse engineering.
Download the Rshell binary for your platform and run it.
Specify the port with -p (default 8089):
./Rshell -p 8089
For a detailed walkthrough (with screenshots), see the usage documentation:
👉 Rshell Usage Documentation (Chinese)
Topics covered:
- Changing credentials and customizing themes
- Adding protocol listeners and generating clients
- WebDelivery setup
- Client management (terminal, files, process management)
- Windows advanced operations (shellcode generation and in-memory execution)
- Plugin usage and management
Note: the operator UI currently ships in Chinese; localization is in progress.
Improvement ideas are updated from time to time. Suggestions and PRs are welcome — feel free to open an issue to discuss.
📌 View ToDoList
- Interruptible file downloads #21
- Image hosting for notes
- WYSIWYG Markdown notes
- One-click information gathering with results saved into notes
- Golang client: https://github.com/Rubby2001/Rshell-client
- Rust client: https://github.com/Rubby2001/Rshell-client-rust
- Web frontend: https://github.com/Rubby2001/Rshell-web
- This project is designed and developed solely for security research, legally authorized testing, and educational purposes, to help security professionals improve defenses and assess system security.
- It is strictly forbidden to use this project for any illegal purpose, including but not limited to:
- Unauthorized intrusion into systems
- Cyberattack activities
- Any violation of applicable laws and regulations
- Users must ensure they operate under fully legal authorization. The developers are not responsible for any abuse.
- This tool may impact target systems. Users bear all risks and must ensure:
- Explicit authorization for the target system has been obtained
- Compliance with local laws and regulations
- No harm to critical information infrastructure
- The developers make no promise of stealth, stability or fitness for any particular purpose, and assume no direct or indirect liability arising from the use of this tool.
- Downloading or using this project means you have read and agree to all terms of this disclaimer.
This project is open-sourced under the MIT License.