SharpShellPipe - GitLite

KO | EN

gitlite — search

#javascript #react #ai #typescript #deep-learning #nodejs #windows #awesome #kubernetes #vue #security #pytorch #ios #open-source

SharpShellPipe

(★ 123)

This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.

파일 탐색기

최종 버전 다운로드 (.zip)

- image.png
- Program.cs
- SharpShellPipe.csproj
.gitignore
LICENSE
README.md
SharpShellPipe.sln

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/DarkCoderSc/SharpShellPipe

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd SharpShellPipe

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. .NET

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
.NET SDK dotnet 명령어를 쓰기 위한 SDK입니다.

dotnet restore

프로젝트에 필요한 패키지를 내려받습니다.

dotnet run

프로젝트를 빌드하고 바로 실행합니다.

✅ dotnet run 실행 후 터미널에 나타나는 안내 메시지나 주소를 확인하세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# SharpShellPipe

## Project Description

![Image](https://raw.githubusercontent.com/DarkCoderSc/SharpShellPipe/main/Assets/image.png)

This lightweight C# application serves as a demonstration of how simple it is to interactively access a remote system's shell via named pipes using the SMB protocol. It includes an optional encryption layer leveraging AES GCM, utilizing a shared passphrase between both the server and the client. If you're interested in an example that employs both AES GCM and RSA for additional security, consider checking out another one of my projects, [SharpFtpC2](https://github.com/DarkCoderSc/SharpFtpC2). Implementing that security layer into this project would also be relatively straightforward.

Exercise caution if you decide to use this project in a production environment; it was not designed for such use. Proceed at your own risk. The primary aim of this project is to illustrate a well-known network evasion detection technique that will soon be featured on the [Unprotect Project](https://unprotect.it/) website.

## Usage

### Server (Broadcast the Shell)

`SharpShellPipe.exe`

This is the computer you wish to access to.

#### Options

| Parameter           | Type             | Default    | Description  |
|---------------------|------------------|------------|--------------|
| --passphrase (`-p`) | String           | None       | A passphrase that will enable and encrypt all traffic between the server and the client is highly recommended. |
| --username          | String           | None       | An existing Microsoft Windows local user account.  |
| --password          | String           | None       | Password of specified user account. |
| --domain            | String           | None       | specify the domain of the user account under which the new process is to be started. |

#### Examples

Start the named pipe server as the current user with traffic encryption enabled:

```powershell
SharpShellPipe.exe -p "myp4ssw0rd!"
```

Start the named pipe server as another user (`darkcodersc`) without traffic encryption:

```powershell
SharpShellPipe.exe --username "darkcodersc" --password "winpwd"
```

### Client (Receive the Shell)

`SharpShellPipe.exe --client`

#### Options

| Parameter           | Type             | Default    | Description  |
|---------------------|------------------|------------|--------------|
| --client (*)        | String           | None       | Enable client mode; server mode is the default setting.  |
| --name (`-n`)       | String           | "."        | Specify the target machine name where the named pipe server is waiting for connections. By default, the connection attempt is made to the local machine. |
| --passphrase (`-p`) | String           | None       | A passphrase that will enable and encrypt all traffic between the server and the client is highly recommended. |

`*` = Mandatory Options

#### Examples

Connect to the named pipe server on the local machine with traffic encryption enabled:

```powershell
SharpShellPipe.exe --client -p "myp4ssw0rd!"
```

Connect to the named pipe server on `Phrozen` machine without traffic encryption:

```powershell
SharpShellPipe.exe --client --name "Phrozen"
```

## Changelog

### (2025/02/21) V2.0

- Implement command line argument parsing instead of prompting the user.
- Make several improvements and fix glitches.
- It is now possible to spawn a shell as a different Windows user using RunAs.