âšī¸ About PhantomShell
Advanced PowerShell AV/AMSI Evasion Framework + Enterprise C2 Server
PHANTOMSHELL
Advanced PowerShell AV/AMSI Evasion Framework + Enterprise C2 Server
Mission
PhantomShell was built to provide security professionals with a professional-grade tool for authorized red-team operations. It combines cutting-edge evasion techniques with a unified C2 infrastructure to simulate advanced adversaries.
Team
Developed by the Red Parakeet Security Team, a group of offensive security professionals dedicated to advancing the state of red-team tooling.
The-Psypher
Co-Founder / Developer
Kidpentester / Adrilaw
Co-Founder / Developer
Technology
PhantomShell is built entirely with Python's standard library, ensuring zero external dependencies. It runs on any platform with Python 3.6+ and requires no additional installation.
- Payload Generator: Variable renaming, multi-layer encoding, polymorphic generation
- C2 Server: TCP + HTTP agents, Web UI, CLI interface
- Formats: PowerShell, CMD, HTA, VBS, MSHTA
Version History
- Integration of PowerView, PowerUp, and SharpView for advanced Active Directory enumeration
- Built-in BloodHound data collection and analysis
- Automated privilege escalation checks and exploitation
- Extended C2 capabilities with SOCKS proxying
- Multi-platform agent support (Linux/macOS)
- Encrypted C2 communications with custom protocols
- Advanced persistence mechanisms
- Module-based architecture for extensibility
- Unified C2 Server: TCP reverse shells + HTTP agent support
- Professional Web UI: Real-time session management with live updates
- Interactive CLI: Operator interface for direct control
- Advanced Payload Generation: 3-layer encoding and obfuscation
- Polymorphic Generation: Random variable names, different every run
- 5 Delivery Formats: PowerShell, CMD, HTA, VBS, MSHTA
- All-in-One Deployment: Generate, host, and serve payloads
- AMSI/AV Evasion: Multi-layer encoding and variable renaming
- HTTP Agents: Firewall-friendly polling agents
- Payload Hosting: Built-in HTTP server with download cradles
- Basic PowerShell payload generation
- Simple variable obfuscation
- TCP reverse shell listener
- Basic C2 server functionality
- Single-layer encoding
- Limited delivery formats
Legal Disclaimer
THIS SOFTWARE IS INTENDED ONLY FOR AUTHORIZED CYBERSECURITY TESTING.
PhantomShell is designed for:
- â Authorized penetration testing
- â Red team exercises
- â Security research
- â Educational purposes
Unauthorized use may violate:
- Computer Fraud and Abuse Act (CFAA)
- Local and international cybercrime laws
- Corporate security policies
By using this tool, you agree to:
- Use only on systems you own or have written permission to test
- Comply with all applicable laws and regulations
- Accept full responsibility for your actions
- Hold harmless the authors and contributors
THE AUTHORS ASSUME NO LIABILITY FOR MISUSE OR DAMAGE CAUSED BY THIS TOOL.
License
PhantomShell is dual-licensed:
- Open Source: GNU General Public License v3 â For non-commercial use
- Commercial: PhantomShell Commercial License â For enterprise use
Copyright © 2026 Red Parakeet Security Team