Packages and Binaries:
penelope
Advanced shell handler for penetration testing and CTFs
Penelope is a modern shell handler designed for penetration testers and CTF
players. It provides a highly capable alternative to basic netcat listeners,
streamlining reverse and bind shell management during post-exploitation.
It operates entirely using the Python standard library, requiring no external dependencies.
Key features include:
- Automatic PTY upgrades for fully interactive terminal sessions.
- Multi-session management to control multiple targets simultaneously.
- Native session logging and interaction tracking.
- Seamless file transfer capabilities between host and target.
- Helper modules for local privilege escalation and enumeration.
Installed size: 228 KB
How to install: sudo apt install penelope
Dependencies:
- python3
penelope
Advanced shell handler for penetration testing and CTFs
root@kali:~# penelope -h
usage: penelope [-p PORTS] [-i ] [-c ] [-j ] [-a] [-l] [-h] [-L] [-T] [-CT] [-M] [-m ] [-S] [-ms ] [-C] [-U] [-O] [-s] [-prefix ] [-N ] [-v] [-d]
[-dd] [-cu]
[args ...]
Penelope Shell Handler
positional arguments:
args Arguments for -s/--serve and SSH reverse shell modes
options:
-p, --ports PORTS Ports (comma separated) to listen/connect/serve, depending on -i/-c/-s options
(Default: 4444/5555/8000)
Reverse or Bind shell?:
-i, --interface Local interface/IP to listen. (Default: 0.0.0.0)
-c, --connect Bind shell Host
-j, --jump Reverse shell jump endpoints
Hints:
-a, --payloads Show sample reverse shell payloads for active Listeners
-l, --interfaces List available network interfaces
-h, --help show this help message and exit
Session Logging:
-L, --no-log Disable session log files
-T, --no-timestamps Disable timestamps in logs
-CT, --no-colored-timestamps Disable colored timestamps in logs
Misc:
-M, --menu Start in the Main Menu
-m, --maintain Keep N sessions per target
-S, --single-session Accommodate only the first created session
-ms, --max-sessions Max active sessions per host (default 5, 0 = reject all new)
-C, --no-attach Do not auto-attach on new sessions
-U, --no-upgrade Disable shell auto-upgrade
-O, --oscp-safe Enable OSCP-safe mode
File server:
-s, --serve Run HTTP file server mode
-prefix, --url-prefix URL path prefix
Debug:
-N, --no-bins Simulate missing binaries on target (comma-separated)
-v, --version Print version and exit
-d, --debug Enable debug output
-dd, --dev-mode Enable developer mode
-cu, --check-urls Check hardcoded URLs health and exit
Updated on: 2026-Aug-25