Introducing WireWrench v2
WireWrench v1 automated URL injection for web shells. v2 rethinks the architecture: decouple the shell from the client so the shell survives crashes, disconnects, and agent reboots.
Problem
AI agents and automated tooling need stateless interactions with remote shells. A traditional reverse shell ties the client and shell together — if the agent crashes or the connection drops, the session is gone.
Solution
Two binaries:
ww-server— Listens on a port, catches incoming reverse shells, keeps them aliveww— Sends one-shot commands to the server, reads output over a Unix socket
The shell stays alive regardless of what happens to the client. Multiple clients can interact with different sessions through the same server.
Use cases
- Penetration testing without fragile session management
- AI-assisted operations — fire a command, read output, disconnect, come back later
- Multi-operator scenarios — team members interact with different shells on the same target
- CTFs — persistent shell access through client crashes