shellfire

No entries match these filters. Clear filters

1. v0.16 Aug 3, 2026 · issue 034

   shellfire v0.16 adds a configurable request timeout to prevent indefinite hangs on unresponsive targets.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.16 https://github.com/unix-ninja/shellfire.git
   # already have the repo? check out this version:
   $ git checkout v0.16

   • Adds a configurable request timeout (cfg.timeout, default 30 s) to GET, POST, and form requests so shellfire no longer blocks indefinitely against a hung target.

   1 detail in Everything

2. v0.15 Jul 30, 2026 · issue 031

   shellfire v0.15 adds a built-in intercepting proxy to capture live browser sessions and seed exploit configs automatically.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.15 https://github.com/unix-ninja/shellfire.git
   # already have the repo? check out this version:
   $ git checkout v0.15

   └──▷ TRY IT
   Capture a real authenticated browser request to a vulnerable target and instantly seed your exploit config — no manual URL/cookie transcription needed.
   copy

   $ (config)> proxy start 8080
   (config)> proxy list
   (config)> proxy use 0
   (config)> url https://example.com/view?file={}
   (config)> shell

   Inspect the full contents of a captured request before committing it to your exploit config.
   copy

   $ (config)> proxy show 1

   • Adds a built-in HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. intercepting proxy (proxy start) to observe real browser sessions without manually transcribing URLs, cookies, or POST bodies.
   • New proxy list command enumerates all requests captured during a proxy session for review.
   • New proxy show <index> command displays the full details of a captured request.
   • New proxy use <index> command seeds the active exploit config (URL, method, headers, cookies, POST body) directly from a captured request.
   • New proxy ca command reprints the CA certificate path needed to intercept HTTPS traffic.

   +1 more show less

   • New proxy clear and proxy stop commands manage captured sessions and shut down the proxy.

   6 details in Everything

3. v0.11 Mar 3, 2023 · release notes

   Shellfire v0.11 introduces separate config and shell modes plus a basic fuzzing feature.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.11 https://github.com/unix-ninja/shellfire.git
   # already have the repo? check out this version:
   $ git checkout v0.11

   • Introduces config mode for configuring how payloads are processed
   • Introduces shell mode for sending payloads
   • Adds a basic fuzzing feature (WIP)

   3 details in Everything

4. v0.10 Sep 16, 2022 · release notes

   shellfire v0.10 adds Python Requests Session support and URL-encoded param parsing

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.10 https://github.com/unix-ninja/shellfire.git
   # already have the repo? check out this version:
   $ git checkout v0.10

   └──▷ USE IT
   Check the installed shellfire version from the CLI.
   shell copy

   shellfire --version

   Use an existing authenticated Requests session with shellfire to leverage its cookie handling and headers.
   python copy

   import requests
   import shellfire
   
   session = requests.Session()
   session.headers.update({'Authorization': 'Bearer token'})
   result = shellfire.execute(session=session, target='https://api.example.com/endpoint')

   • Adds --version flag to display the current shellfire version.
   • Enables shellfire to use existing Python Requests Sessions as the HTTP client, with dynamic cookie updates and custom overlay support.
   • Adds support for parsing URL-encoded parameters in cookies, headers, and POST data.

   3 details in Everything

5. v0.9 Sep 5, 2022 · release notes

   Shellfire v0.9 adds .method form for multipart uploads with @filename and plugin generation

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.9 https://github.com/unix-ninja/shellfire.git
   # already have the repo? check out this version:
   $ git checkout v0.9

   └──▷ USE IT
   Upload a local file by path using the new @filename syntax in a shellfire command.
   shell copy

   shellfire request /upload .method form @file.zip

   Generate multipart file content using a specific plugin instead of a raw path.
   shell copy

   shellfire request /upload .method form my-upload-plugin

   • Adds .method form syntax to specify multipart form data handling
   • Adds @filename argument to upload a raw file in multipart requests
   • Adds support for specifying a plugin name to generate multipart file content

   3 details in Everything

6. v0.8.1 Aug 29, 2022 · release notes

   Adds plugin system, expanded injection support (POST, cookies, headers), and new output marker/splitting flexibility.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.8.1 https://github.com/unix-ninja/shellfire.git
   # already have the repo? check out this version:
   $ git checkout v0.8.1

   • Introduces a new plugin system for extensibility.
   • Enables injection support for POST data, cookies, and headers.
   • Adds new flexibility for output markers and splitting.

   3 details in Everything