t3l3machus/hoaxshell

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

3487 stars · 524 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Hoaxshell is a Windows reverse shell payload generator and handler that abuses the HTTP(S) protocol to establish a beacon-like reverse shell. It is a Python-based red teaming tool for authorized penetration testing, with a newer standalone listener available at revshells.com.

Use cases

• generate windows reverse shell payloads over http
• handle beacon-like reverse shell sessions during pentests
• red team command and control over https
• bypass av with obfuscated powershell payloads
• establish reverse shells that evade firewall egress rules
• test windows endpoint detection during authorized assessments

When to choose

• you need an http(s)-based reverse shell for authorized Windows pentesting
• you want a beacon-like C2 channel that blends with web traffic
• you need quick payload generation with a built-in session handler

When to avoid

• you lack explicit authorization to test the target host
• you need a full interactive PTY rather than a beacon-like shell illusion
• you need an undetected payload out of the box - AMSI flags it without obfuscation

Facets

cli-tool · maturity active

penetration-testing security cli penetration-testing security windows python cli windows reverse-shell red-team c2 powershell http-beacon payload-generator linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="t3l3machus/hoaxshell")