ABPTTS (A Black Path Toward The Sun) tunnels TCP traffic over HTTP/HTTPS using a Python client script paired with a JSP/WAR or ASP.NET server-side component deployed to a web application server. Anywhere a web shell could be deployed, ABPTTS can instead establish a full TCP tunnel, which has been used to carry RDP, interactive SSH and other TCP-based access through a compromised web application server.
Runs the client on the operator host, forwarding a local port through the uploaded server-side component to a destination host/port reachable from the web application server.
python abpttsclient.py -c <CONFIG_FILE> -u <FORWARDINGURL> -f <LOCALHOST>:<LOCALPORT>/<TARGETHOST>:<TARGETPORT>