hi im new on pen testing i can execute system commands on target but when try to summon a reverse shell got connection refused i know its a firewall blocking outbound connections and in may be but my question its there its a method for bypass the connection problem and get reverse interactive shell? its a linux machine got vulns but i cant exploit those because i cant spawn interactive shell ty 😯😯😯
how to bypass (conection refused) when try to spawn a reverse shell |
|
Sep 14, 2023 04:06 PM
(This post was last modified: Sep 14, 2023 04:08 PM by wacamole.)
ty for response i just got dumb shell php one i tryend via python php bash perl and cant get reverse shell i was thinking on port forwarding with ngrok but its complex with restricted shell and dumb shell is there a way for open port from test server?
ps my port open and no problem handling other rev conections (Sep 14, 2023 04:06 PM)wacamole Wrote: ty for response i just got dumb shell php one i tryend via python php bash perl and cant get reverse shell i was thinking on port forwarding with ngrok but its complex with restricted shell and dumb shell is there a way for open port from test server? So it's a reverse shell that you're trying to inject from a web shell? Ngrok won't help if your listener is accessible from the Internet. Is the server sending a RST packet? That shouldn't be right with a revshell.
Sep 14, 2023 05:06 PM
(This post was last modified: Sep 14, 2023 05:09 PM by wacamole.)
(Sep 14, 2023 04:20 PM)DramaKing Wrote: So it's a reverse shell that you're trying to inject from a web shell? Ngrok won't help if your listener is accessible from the Internet. Is the server sending a RST packet? That shouldn't be right with a revshell. yup weebely php i can execute cmd but i cant bypass that tools like chissel can work on this specific case? not an expert in networking but studying from this specific case i dont have checked the RST but im gonna take a look again ty for response
Sep 15, 2023 11:39 AM
(This post was last modified: Sep 15, 2023 11:40 AM by Mad76e..)
(Sep 14, 2023 02:52 PM)wacamole Wrote: hi im new on pen testing i can execute system commands on target but when try to summon a reverse shell got connection refused i know its a firewall blocking outbound connections and in may be but my question its there its a method for bypass the connection problem and get reverse interactive shell? its a linux machine got vulns but i cant exploit those because i cant spawn interactive shell ty 😯😯😯 Drama king is correct Moreover windows10/11 has become somewhat good to detect and block those generic shells automatically. (Sep 15, 2023 11:39 AM)Mad76e. Wrote: Drama king is correct Irrelevant when this is a Linux box. |
|
|

