Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a question about privileges when performing an Operating system command injection.

If an attacker succeeds in getting a reverse shell on a remote server through netcat (netcat -v -e '/bin/bash' -l -p 5550), does he/she have admin privileges on the victim machine or some sort of escalation is needed?


share|improve this question
up vote 1 down vote accepted

Usually, you need some sort of escalation.

If you can run the command netcat -v -e '/bin/bash' -l -p 5550 all you've done (effectively) is have the remote machine open a port for you as the user that was running whatever process ran the command. That is to say, if you managed to inject your netcat command into a www process, you are likely logged in as the 'www' user, and not (if the remote machine has been remotely secured) as root.

share|improve this answer
Thanks, so it all depends on the target machine getting a reverse shell doesn't mean that everything is most cases I believe that getting access to files on the server is no mean I right? – user1990170 Feb 10 '13 at 10:25
Yeah - once you have a user shell you can start poking around for other things, and it may be more likely on a machine with at least one major hole that you may find a local escalation you can use. – Bob Watson Feb 10 '13 at 10:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.