https://cybertoolchain.io/tools/penelope New releases and features in penelope, tracked by The Cyber Toolchain. en Wed, 17 Jun 2026 22:43:56 GMT https://github.com/brightio/penelope/releases/tag/v0.21.0 https://github.com/brightio/penelope/releases/tag/v0.21.0 Wed, 17 Jun 2026 22:43:56 GMT Penelope v0.21.0 adds session capping, upload/download progress bars, and three new post-exploitation modules. • Adds `-ms / --max-sessions` flag to cap the number of concurrent sessions per host (default 5). • Adds progress bars for every upload and download across both agent and non-agent sessions. • Adds DirtyPipe (CVE-2022-0847) and DirtyFrag local privilege-escalation modules. • Adds adPEAS Active Directory enumeration module. • Updates bundled ligolo-ng to v0.8.3 and SharpHound to v2.13.0. Breaking changes: • The old `script` / `socat` upgrade fallback has been dropped; sessions relying on that fallback will no longer upgrade automatically. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.21.0 https://github.com/brightio/penelope/releases/tag/v0.21.0 Wed, 17 Jun 2026 22:43:56 GMT Penelope v0.21.0 adds per-host session caps, upload/download progress bars, and new post-exploitation modules. • Adds `-ms / --max-sessions` flag to cap the number of active sessions per host (default 5; set to 0 to reject all new connections). • Adds real-time progress bars for every file upload and download across both agent and non-agent sessions. • New post-exploitation modules: DirtyPipe (CVE-2022-0847), DirtyFrag, and adPEAS. • Updated bundled tooling: ligolo-ng upgraded to v0.8.3, SharpHound upgraded to v2.13.0. • Drops the legacy `script` / `socat` shell-upgrade fallback, streamlining the upgrade path. Breaking changes: • The old `script` / `socat` upgrade fallback has been dropped, removing a previously available session upgrade method. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.20.0 https://github.com/brightio/penelope/releases/tag/v0.20.0 Sat, 30 May 2026 22:27:17 GMT Penelope v0.20.0 adds a Windows Potato privilege-escalation module and selective upload support for post-exploitation modules. • Adds a `potato` module for Windows privilege escalation. • Adds selective upload support for the `privesc`, `potato`, `credump`, and `AD` modules, enabling targeted file delivery during post-exploitation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.19.1 https://github.com/brightio/penelope/releases/tag/v0.19.1 Thu, 12 Mar 2026 08:05:30 GMT Penelope v0.19.1 adds remote filesystem tab-completion for downloads, a new `cd` command, and a `cleanup` module. • Adds remote filesystem autocompletion when using the `download` command, enabling tab-completion of paths on the target host. • New `cd` main menu command for navigating directories from the interactive menu. • New `cleanup` module for post-session cleanup operations. • Session display now shows the current user on newly spawned shells. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.18.0 https://github.com/brightio/penelope/releases/tag/v0.18.0 Sun, 11 Jan 2026 19:27:57 GMT Penelope v0.18.0 adds SharpHound, Mimikatz, LaZagne and more to its module library, plus jumpbox support for TCP listeners. • Adds SharpHound, PowerView, Mimikatz, LaZagne, SharpWeb, GhostPack collection, and Snaffler to the built-in enrichment modules. • Supports jumpboxes for TCP Listeners, enabling shell routing through intermediary hosts. • Introduces an `on_first_attach` hook for Modules, allowing actions to trigger automatically when a session is first attached. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.15.0 https://github.com/brightio/penelope/releases/tag/v0.15.0 Mon, 29 Dec 2025 14:33:47 GMT Penelope v0.15.0 adds built-in modules for Ligolo-ng and Chisel tunneling tools. • Adds a `Ligolo-ng` module for pivoting and tunneling directly from the shell handler. • Adds a `Chisel` module for HTTP-based tunneling directly from the shell handler. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.14.14 https://github.com/brightio/penelope/releases/tag/v0.14.14 Fri, 12 Dec 2025 22:28:36 GMT Penelope v0.14.14 adds pspy/panix/traitor modules, OSCP-safe mode, multi-port listeners, and interface-filtered payloads. • Adds `pspy` module for unprivileged process monitoring on target hosts. • Adds `panix` module for persistence mechanism deployment. • Adds `traitor` module for automated privilege escalation. • New `-O / --oscp-safe` switch restricts penelope to techniques permitted in OSCP exam environments. • Enables listeners on multiple ports simultaneously. • Adds interface filter on the `payloads` command to scope payload generation to a specific network interface. • Disables random suffix on uploads by default, producing predictable filenames on target. Breaking changes: • Random suffix on uploads is now disabled by default — uploads that previously relied on unique suffixed filenames will no longer get them unless explicitly re-enabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.14.8 https://github.com/brightio/penelope/releases/tag/v0.14.8 Mon, 08 Sep 2025 00:23:50 GMT Penelope v0.14.8 adds local port forwarding, SSH reverse shells, a FileServer, and new modules including meterpreter and ngrok. • Adds local port forwarding capability for tunneling traffic through shell sessions. • Introduces FileServer functionality for serving files directly from the handler. • Supports reverse shells via SSH. • Supports Docker Alpine, socat, and Python shell types. • Adds meterpreter, lse, ngrok, linux_procmemdump, and uac modules. • Supports BSD targets and improves macOS compatibility. • Introduces Streams for concurrent interaction across multiple sessions. • Adds readline support for basic (non-PTY) shells. • Adds upload functionality for Windows shells. • Re-enables PTY support for Windows shells. • Enables accessing command history entries via exclamation mark syntax. • Adds automatic PowerShell payload generation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.10.0 https://github.com/brightio/penelope/releases/tag/v0.10.0 Sat, 28 Oct 2023 13:31:30 GMT Adds raw mode menu, Metasploit payload hints, HTTP proxy support, and SSL bypass for internet downloads in penelope v0.10.0 • `raw` mode menu added to the waiting Listener • Revamped payload hints and added `metasploit` hints • Added SSL verification bypass for Internet downloads Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.9.2 https://github.com/brightio/penelope/releases/tag/v0.9.2 Sun, 18 Dec 2022 13:47:31 GMT penelope v0.9.2 adds PEASS-ng module, tasks for background remote commands, 'exec' menu command, and progress bars. • Added PEASS-ng module • Introduced `tasks` (execute remote command from file/memory in background and get the output in a local file) • Introduced 'exec' menu command • Introduced progress bar for download/upload Breaking changes: • Removed PTY Windows shell support temporarily • Removed Unix 'advanced' shell support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.8.4 https://github.com/brightio/penelope/releases/tag/v0.8.4 Mon, 24 Jan 2022 14:09:36 GMT Penelope v0.8.4 adds X active sessions, alternate host/port spawning, Python 3.6+ compatibility, and remote exploitdb uploads. • Maintains X active sessions • Spawn to another port and/or host • Uploads exploitdb exploits from a URL Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope https://github.com/brightio/penelope/releases/tag/v0.8.0 https://github.com/brightio/penelope/releases/tag/v0.8.0 Mon, 24 Jan 2022 13:47:36 GMT Initial release of Penelope: CLI for interactive shells with PTY support, file transfer, and multi-session listeners. • Auto-upgrades shells to PTY with automatic window resize • Logs interaction sessions with target systems • Enables downloading files from remote targets • Enables uploading files to remote targets • Allows uploading preset scripts for execution on targets • Supports spawning backup shells for session resilience • Manages multiple concurrent sessions within a single instance • Configures and runs multiple simultaneous listeners • Exposes importable library interface for exploit integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/penelope