#reverseshell — Public Fediverse posts

Sprytny sposób na reverse shell przez Claude Code

Badacze bezpieczeństwa Andre Hall i Miller Engelbrecht z 0DIN zademonstrowali technikę ataku, która pozwalała na uzyskanie zdalnego dostępu (reverse shell) do komputera ofiary. Wystarczyło, że ta otworzyła złośliwe repozytorium w Claude Code i poleciła asystentowi AI uruchomić projekt. TLDR: Repozytorium nie zawierało złośliwego kodu. Payload, który ostatecznie zostaje wykonany, znajdował...

#WBiegu #AgenticAi #Ai #Ciekawostki #Claude #Cyberbezpieczeństwo #ReverseShell

https://sekurak.pl/sprytny-sposob-na-reverse-shell-przez-claude-code/

Sprytny sposób na reverse shell przez Claude Code

Badacze bezpieczeństwa Andre Hall i Miller Engelbrecht z 0DIN zademonstrowali technikę ataku, która pozwalała na uzyskanie zdalnego dostępu (reverse shell) do komputera ofiary. Wystarczyło, że ta otworzyła złośliwe repozytorium w Claude Code i poleciła asystentowi AI uruchomić projekt. TLDR: Repozytorium nie zawierało złośliwego kodu. Payload, który ostatecznie zostaje wykonany, znajdował...

#WBiegu #AgenticAi #Ai #Ciekawostki #Claude #Cyberbezpieczeństwo #ReverseShell

https://sekurak.pl/sprytny-sposob-na-reverse-shell-przez-claude-code/

Hiding your callback through HTTPS

https://anonsys.net/display/bf69967c-1868-fce9-5e30-613967945901

Used #girsh today for the first time with a #HTB box. It is a listener for a reverse shell spawning a fully interactive shell automatically. Worked quite well. I must say, I do miss autocomplete if it is not available.

I did not do a code review of this tool as I was only using it on an isolated VM. Run at your own risk ;)

https://github.com/nodauf/Girsh

#reverseShell

Malware found on NPM infecting local package with reverse shell

https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell

#HackerNews #Malware #NPM #ReverseShell #CyberSecurity #SoftwareDevelopment

Malware found on NPM infecting local package with reverse shell

https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell

#HackerNews #Malware #NPM #ReverseShell #CyberSecurity #SoftwareDevelopment

Hacker in Snowflake Extortions May Be a U.S. Soldier https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/ #Ne'er-Do-WellNews #ConnorRileyMoucka #telekomterrorist #ALittleSunshine #TheComingStorm #DDoS-for-Hire #JohnErinBinns #cyb3rph4nt0m #Kiberphant0m #Reverseshell #Ransomware #SouthKorea #buttholio #Proman557 #Snowflake #Vars_Secc #Judische #Verizon #Boxfan #ShiBot #Naver #Waifu #ATT

Hacker in Snowflake Extortions May Be a U.S. Soldier https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/ #Ne'er-Do-WellNews #ConnorRileyMoucka #telekomterrorist #ALittleSunshine #TheComingStorm #DDoS-for-Hire #JohnErinBinns #cyb3rph4nt0m #Kiberphant0m #Reverseshell #Ransomware #SouthKorea #buttholio #Proman557 #Snowflake #Vars_Secc #Judische #Verizon #Boxfan #ShiBot #Naver #Waifu #ATT

Hacker in Snowflake Extortions May Be a U.S. Soldier

https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/

#Ne'er-Do-WellNews #ConnorRileyMoucka #telekomterrorist #ALittleSunshine #TheComingStorm #DDoS-for-Hire #JohnErinBinns #cyb3rph4nt0m #Kiberphant0m #Reverseshell #Ransomware #SouthKorea #buttholio #Proman557 #Snowflake #Vars_Secc #Judische #Shi-Bot #Verizon #Boxfan #Naver #Waifu #ATT

Hacker in Snowflake Extortions May Be a U.S. Soldier

https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/

#Ne'er-Do-WellNews #ConnorRileyMoucka #telekomterrorist #ALittleSunshine #TheComingStorm #DDoS-for-Hire #JohnErinBinns #cyb3rph4nt0m #Kiberphant0m #Reverseshell #Ransomware #SouthKorea #buttholio #Proman557 #Snowflake #Vars_Secc #Judische #Shi-Bot #Verizon #Boxfan #Naver #Waifu #ATT

Mon dieu - Penelope is alright! Probably my favorite #reverseshell catcher for #linux targets. https://github.com/brightio/penelope

Highly recommend!

Chinese APT Abuses VSCode to Target Government in Asia

[TR: Wait what? VSCode has a reverse shell feature?! Turn this off. Sounds like something proposed by another large company’s dev team recently.] #devtools #reverseshell #c2

https://unit42.paloaltonetworks.com/stately-taurus-abuses-vscode-southeast-asian-espionage/

Chinese APT Abuses VSCode to Target Government in Asia

[TR: Wait what? VSCode has a reverse shell feature?! Turn this off. Sounds like something proposed by another large company’s dev team recently.] #devtools #reverseshell #c2

https://unit42.paloaltonetworks.com/stately-taurus-abuses-vscode-southeast-asian-espionage/

Why ara #poc for #vulnerability always #reverseshell ? I get that a reverse shell via RCE is a scary magic trick. But in practical #pentesting more often than not I'd rather have a single fire DNS lookup or HTTP request. It's much saver than dropping a shell into a customers environment and it does the job.

#informationsecurity

Hello!
I wanted to share 2 reverse shells I have made in C, for both Windows and Linux! It's only the source codes of them, non-compiled that is.

They are made with being as short as possible in mind, so they are not "fancy" in any way.

Contributions is ofc welcome! Reach out to me if you have any questions.
Have a nice day! I will leave the link to the GitHub Repo below.

- https://github.com/loneicewolf/ReverseShells

*Hopefully they are useful :tuturu:​

#reverseshells #reverseshell #reverseengineering

Hello!
I wanted to share 2 reverse shells I have made in C, for both Windows and Linux! It's only the source codes of them, non-compiled that is.

They are made with being as short as possible in mind, so they are not "fancy" in any way.

Contributions is ofc welcome! Reach out to me if you have any questions.
Have a nice day! I will leave the link to the GitHub Repo below.

- https://github.com/loneicewolf/ReverseShells

*Hopefully they are useful :tuturu:​

#reverseshells #reverseshell #reverseengineering

I had a command injection vulnerability, but the target system didn't have netcat or other (obvious) means of getting a reverse shell. What to do? I wrote a minuscule "nc -e /bin/sh" in C + mips assembly, then wrote a small JavaScript stager that would encode the binary to a "echo -ne 'payload'" command that would then be used to drop the binary to /tmp, chmod it and execute with desired ip address and port. The nanonc tool https://sintonen.fi/src/nanonc/ supports both listen and connect back modes. The code calls linux kernel directly, doesn't use libc at all and has a custom startup code. The (low effort) stripped mipsel binary was 1372 bytes. I'm sure it could be made way way smaller, but this was well within reason already.

Was this total overkill and wholly unnecessary amount of work just to exploit this vulnerability? Yes. Did I learn a lot about mips platform, mips calling conventions and how to create tiny apps calling the linux kernel directly? Oh yes. #infosec #hacking #exploitation #tooling #reverseshell

I had a command injection vulnerability, but the target system didn't have netcat or other (obvious) means of getting a reverse shell. What to do? I wrote a minuscule "nc -e /bin/sh" in C + mips assembly, then wrote a small JavaScript stager that would encode the binary to a "echo -ne 'payload'" command that would then be used to drop the binary to /tmp, chmod it and execute with desired ip address and port. The nanonc tool https://sintonen.fi/src/nanonc/ supports both listen and connect back modes. The code calls linux kernel directly, doesn't use libc at all and has a custom startup code. The (low effort) stripped mipsel binary was 1372 bytes. I'm sure it could be made way way smaller, but this was well within reason already.

Was this total overkill and wholly unnecessary amount of work just to exploit this vulnerability? Yes. Did I learn a lot about mips platform, mips calling conventions and how to create tiny apps calling the linux kernel directly? Oh yes. #infosec #hacking #exploitation #tooling #reverseshell

Controlling your server with a reverse shell attack https://t.co/65HlGDRf9T
#reverseShell #remoteCodeExecution #RCE #security #devsecops https://t.co/LqKB3vOawI

Controlling your server with a reverse shell attack https://t.co/65HlGDRf9T
#reverseShell #remoteCodeExecution #RCE #security #devsecops https://t.co/LqKB3vOawI

Reverse shell not working

https://security.stackexchange.com/questions/267948/reverse-shell-not-working

#reverseshell #network #docker #netcat #dvwa

Reverse shell not working

https://security.stackexchange.com/questions/267948/reverse-shell-not-working

#reverseshell #network #docker #netcat #dvwa

new shellgen be like

#InfoSec #RedTeam #DFIR #ReverseShell

new shellgen be like

#InfoSec #RedTeam #DFIR #ReverseShell

Writing reverse shell in #rustlang :

https://youtu.be/8pcg1k2BEho

#pentesting #reverseshell #Exploit_Development #infosec #programming

Writing reverse shell in #rustlang :

https://youtu.be/8pcg1k2BEho

#pentesting #reverseshell #Exploit_Development #infosec #programming

#Netlab details a campaign targeting #QNAP devices, where attackers are using a three-year-old #exploit to deploy a #ReverseShell - https://blog.netlab.360.com/in-the-wild-qnap-nas-attacks-en/