RMETAshell
rMETAshell takes a shell command and an image, video or text file as input. It then injects the command into the file using metadata comments. After injection, it generates a one-liner execution method for retrieving and executing the injected command from a remote location.
Install / Use
/learn @git5loxosec/RMETAshellREADME
rMETAshell
MAJOR UPDATE: 01:38:43 UTC Monday, January 29, 2024
rMETAshell is a versatile command-line tool designed to inject commands into media and text files, facilitating the creation of one-liner execution methods for various file formats. It offers an easy way to embed commands such as reverse shells or custom scripts into files like pictures or videos, which can then be used for various purposes, including security testing and penetration testing.
FEATURED ON LINUXHUNTERS.COM Jan 13, 2024 ARTICLE!
THIS PROJECT IS UNDER CONSTANT DEVELOPMENT!
Inject your prefered command into any media file or text-based file, like jpg, mp4 and txt!
5 new base64 encoding and decoding methods for your generated one-liner!
One-liner generated with base64 encoding.
Run it on a remote machine.
Executed and running without problems, the generated one-liner was a success!
And Have fun, responsibly!
Features
- Command injection into media and text files.
- Automatic generation of one-liner execution methods.
- Compatibility with various image, video, and text file formats.
- Option to encode the one-liner using base64.
- Multiple decoding methods for the base64-encoded one-liner.
- Easy-to-use command-line interface.
Installation
Clone the repository
git clone https://github.com/git5loxosec/rMETAshell.git
Navigate to the rMETAshell directory
cd rMETAshell
Make the script executable
chmod +x rMETAshell.sh
Usage
./rMETAshell.sh [OPTIONS] <command> <filename> <URL>
Options:
-h, --help Display help. -e, --encode Encode using base64.
Arguments:
<command> Command for injection into the media file. <filename> Name of the file to inject command (e.g. example.png). <URL> Server URL (e.g. http://www.example.com). File Format Compatibility Lists of compatible media and text file formats are provided to ensure reliable injection.
Video tutorial:
Contributing
Contributions are what make the open-source community an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
Disclaimer
rMETAshell is intended for educational and ethical use only. Any misuse of this tool for malicious activities is strictly prohibited.
Related Skills
healthcheck
341.2kHost security hardening and risk-tolerance configuration for OpenClaw deployments
imsg
341.2kiMessage/SMS CLI for listing chats, history, and sending messages via Messages.app.
xurl
341.2kA CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
docs-writer
99.5k`docs-writer` skill instructions As an expert technical writer and editor for the Gemini CLI project, you produce accurate, clear, and consistent documentation. When asked to write, edit, or revie
