Files
kmanc-remote_code_oxidation/tcp_reverse_shell
kmanc c7b118babb Release1.1 (#35)
* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md
2022-02-04 19:19:15 -08:00
..
2022-02-03 16:57:30 -08:00
2022-02-03 16:57:30 -08:00
2022-02-04 19:19:15 -08:00

RCO: TCP Reverse Shell

Custom badge

Linux target Windows target
gif gif

How it works

The reverse shells for both Linux and Windows work by establishing a Transmission Control Protocol (TCP) session from the victim machine to the attacking machine. Then a Terminal (Linux) or Command Prompt (Windows) process starts with its standard input, standard output, and standard error all assigned to the TCP session. This means that input commands and output results are read from and written to (respectively) the TCP stream.

Using it

  1. [Not shown in GIF] Open the config file and change the IP address and port to match the IP address of your attacking machine and the port you will use for a listener respectively

  2. [Not shown in GIF] Compile the executable

    For Linux targets

    cargo build -p tcp_reverse_shell --release
    

    For Windows targets

    cargo build --target x86_64-pc-windows-gnu -p tcp_reverse_shell --release
    
  3. Start a netcat listener on the attacking machine on the same port you configured in step 1

    nc -nlvp 4444
    
  4. Execute the payload on the victim machine

  5. Return to the listener and enter desired commands for the victim machine to run

Detection rates

Linux - 0 / 40 Windows - 0 / 40
image image