terminal
school Academy / Practice / Interactive Payloads
Live Generator · 13 Practical Labs →
TRYHACKME & CTF OFFENSIVE REFERENCE

Offensive Payload & Exploitation Cheatsheet

Curated practitioner collection of verified Remote Code Execution (RCE), Command Injection (CMDi) filter bypasses, Local File Inclusion (LFI) wrappers, log poisoning, reverse shells, and TTY stabilization pipelines.

ACTIVE NETCAT LISTENER:
nc -lvnp 4444
Listening on configured LPORT
wifi
tag
search
cloud_sync

Catching Shells & HTTP Delivery Stagers

Rapid listeners and web hosting pipelines to catch reverse shells or stage binary implants onto the victim host.

Netcat Listener
nc -lvnp [PORT]
Standard TCP port listener.
Rlwrap (History/Arrows)
rlwrap nc -lvnp [PORT]
Enables arrow keys and command history.
Python HTTP Stager
python3 -m http.server 80
Serve scripts, linpeas, or nc binaries.
Socat Full PTY
socat file:`tty`,raw,echo=0 TCP-L:[PORT]
Full native PTY handler without python.
transform

Live Multi-Format Payload Encoder & Obfuscator

Instant WAF / Filter Evasion Formats

Type or paste any custom command or reverse shell below to generate URL-encoded, Base64 one-liners, Hex escapes, and space-bypassed variants in real time.

INPUT COMMAND OR SCRIPT:
Standard URL Encoded
Double URL Encoded (Bypass Decoders)
Base64 Encoded String
Linux Base64 Pipe Execution
Hex Escape Sequence (\x63\x61...)
${IFS} Space-Bypassed Command
shield
ETHICAL AUDITING & EDUCATIONAL COMPLIANCE NOTICE: All payloads, techniques, and commands provided on this page are compiled strictly for authorized security assessments, penetration testing engagements with explicit written permission, Capture The Flag (CTF) competitions, and academic defensive research. Unauthorized access to remote systems is strictly illegal.