There appears to be a severe lack of python bindshells out there. I just don't like the thought that perl could be actually required for anything. Here you get 2 little scripts that both spawn a shell - The first one is fancy, the second one is small. The default password for bind.py is "bl0wfish". Enjoy!
dawizard c0ded this connectback shell which hides its traffic in HTTP GET's and POST's. The idea is to produce less noise. A connectback shell constantly puts SYN's on the wire, and an IDS will be more likely to let that pass without bitching when it is HTTP traffic. Hiding the actual shell traffic inside HTTP traffic is just the next logical step.
