antonioCoco/SharPyShell

Health v2 · maintenance only

Adoption not part of the score

1072 stars · 158 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SharPyShell is a Python tool that generates a tiny, obfuscated ASP.NET webshell for C# web applications on .NET Framework and provides an interactive encrypted-channel terminal for post-exploitation. It compiles C# and PowerShell code in memory at runtime to evade file and network signature detection.

Use cases

• generate an obfuscated aspx webshell for a pentest engagement
• interact with a compromised IIS server through an encrypted channel
• run post-exploitation commands on a restricted web server with limited network access
• perform privilege escalation and lateral movement from a webshell
• evade IDS signatures during authorized penetration testing

When to choose

• you are a penetration tester needing stealthy post-exploitation on an ASP.NET/IIS target
• the compromised server has heavily restricted inbound and outbound connections
• you need in-memory C# or PowerShell execution without dropping detectable payloads

When to avoid

• you need a full-featured C2 framework like Meterpreter or Empire
• your target runs VB.NET instead of C#
• you are not operating in an authorized security testing context

Facets

cli-tool · maturity maintenance

penetration-testing security cryptography cli penetration-testing security web-development python cli windows webshell aspnet post-exploitation obfuscation red-team iis csharp web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="antonioCoco/SharPyShell")