> For the complete documentation index, see [llms.txt](https://gitbook.seguranca-informatica.pt/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gitbook.seguranca-informatica.pt/tools/persistence.md).

# Persistence

## XSS

 [**JSShell**](https://github.com/Den1al/JSShell): An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS (Cross Site Scripting) payload to achieve browser remote code execution (similar to the BeeF framework).

[![asciicast](https://asciinema.org/a/217167.svg)](https://asciinema.org/a/217167)

 [**beef**](https://github.com/beefproject/beef):  BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser.

## Webshell & Reverse shell

[**revshells.com**](https://www.revshells.com/)**:** generates your web/reverse shell payloads in a few clicks.

 [**shellerator**](https://github.com/ShutdownRepo/shellerator): Shellerator is a simple command-line tool aimed to help pentesters quickly generate one-liner reverse/bind shells in multiple languages (Bash, Powershell, Java, Python, etc).

![](/files/-MX2O92pEPo9DdHvcOZ_)

 [**weevely3**](https://github.com/epinna/weevely3)**:** Weaponized web shell.

```
weevely generate <password> <path>
weevely <URL> <password> [cmd]
```

### Execute Hidden Process

```
Start-Process -FilePath "c:\temp\example.bat" -WorkingDirectory "c:\temp" -WindowStyle Hidden
```