the_open_door
coffee
ESEN
← Cheatsheets

Shells, transfer & stabilisation

Catch the shell, turn it into a usable TTY, move files between attacker and target and drive Metasploit (msfconsole, meterpreter and msfvenom).

grep>
Reverse shells20 commands
  • Linux: TCP shell
  • Linux: interpreters / GTFO
  • Linux: web (PHP)
  • Windows (PowerShell)
  • File payloads (msfvenom)
  • Resources
Listeners10 commands
  • nc / rlwrap
  • Frameworks (penelope/pwncat)
  • socat
  • Metasploit handler
  • Encrypted (ncat/openssl)
Metasploit & meterpreter37 commands
  • Console & search
  • Select module
  • Set options
  • Launch
  • multi/handler
  • Sessions
  • Meterpreter: system
  • Meterpreter: tokens/creds
  • Meterpreter: post
  • msfvenom (payloads)
Stabilise the TTY12 commands
  • Spawn TTY
  • Full terminal (stty)
  • socat full-TTY
  • Automatic (penelope/pwncat)
  • Windows (ConPTY)
File transfer24 commands
  • Serve files (attacker)
  • Download: Linux
  • Download: Windows
  • Upload to attacker
  • Encode / no network