当前位置:网站首页>What is a rebound shell? What's the use of bouncing shells?
What is a rebound shell? What's the use of bouncing shells?
2022-07-27 07:54:00 【nginx】
Simply speaking ,Shell Is the interface to implement user commands , Through this interface, we can control the computer , Like the ones that we see all the time ssh It's the execution Shell Command to control the remote server .
That rebound Shell What is? ? Its English name is Reverse Shell, What exactly do you do ? That is, the control end first listens to a certain TCP/UDP port , Then the controlled end sends a request to this port , At the same time, transfer the input and output of your command line to the control end , Thus, the control end can input commands to control the controlled end .
for instance , We have two mainframes A、B, We finally want to achieve in A Up control B. So if you use positive Shell, In fact, in the A On the input B The connection address of , Such as through ssh Connect to B, After successful connection , We can do that A Control by command B 了 .
If you use reverse Shell, That is in A Open a listening port first , And then let B De link A This port of , After successful connection ,A This side can be controlled by command B 了 .
rebound shell What's the usage? ?
Or the original example , We want to use A To control B, If you want to use ssh Wait for the command to control , That has to be input B Of sshd Address or port, right ? But in many cases , Due to the firewall 、 Security group 、 LAN 、NAT Wait for a reason , We can't actually connect directly to B Of , such as :
A Although there is a public network IP, but B It's a machine on the intranet ,A You can't connect directly to B On .
B Firewall or security group restrictions are opened on ,sshd Service port for 22 It's closed .
B It's a dial-up host , Its IP The address changes frequently .
If B Being attacked , We want to make B towards A Report your situation , Then you need to B Take the initiative to connect A.
If this is the case , We can use rebound Shell use A To control B 了 .
边栏推荐
- 【Day42 文献精读】A Bayesian Model of Perceived Head-Centered Velocity during Smooth Pursuit Eye Movement
- 大家节日快乐哈
- 剑指 Offer 58 - I. 翻转单词顺序
- 瑞芯微RK3399-I2C4挂载EEPROM的修改案例
- 【StoneDB Class】入门第一课:数据库知识科普
- Jjwt generate token
- What are the main threads of Youxuan database?
- QingChuang technology joined dragon lizard community to build a new ecosystem of intelligent operation and maintenance platform
- DASCTF2022.07赋能赛密码wp
- C#winform 窗体事件和委托结合用法
猜你喜欢

Jjwt generate token

Sword finger offer 58 - I. flip word order

MCU multi-level menu

C# 事件用法案例 订阅事件+=

Framework of electronic mass production project -- basic idea

What about idea Chinese garbled code

【万字长文】吃透负载均衡,和阿里大牛的技术面谈

什么是真正的 HTAP ?(二)挑战篇

如何更新pip3?和Running pip as the ‘root‘ user can result in broken permissions and conflicting behaviour

如何在 60 秒内去分析和定位问题?
随机推荐
孙子出题难,儿子监考严。老子不会做,还我上学钱
10000 word parsing MySQL index principle -- InnoDB index structure and reading
【QT】capture. Obj:-1: error: lnk2019: unresolved external symbols__ imp_ Htons (solution)
The token verification of applet message push configuration failed. Please check and confirm
Grandson's questions are difficult, and his son's invigilation is strict. I can't do it. Pay back my school money
Enhancement: BTE process introduction
Solution to automatic disconnection of SSH link of Tencent ECS
Convert objects to key value pairs
ADC噪声全面分析 -02- ADC 噪声测量方法和相关参数
杂谈:把肉都烂在锅里就是保障学生权益了?
[day42 literature intensive reading] a Bayesian model of perfect head centered velocity during smooth pursuit eye movement
[QT] unable to open the containing file pcap.h (C1083) in QT creator
代码接口自动化的有点
3D laser slam: Interpretation of logo-loam paper --- Abstract
Shell awk related exercises
擎创科技加入龙蜥社区,共建智能运维平台新生态
大家节日快乐哈
Redison 3.17.5 release, officially recommended redis client
Shell script learning day01
【已解决】单点登录成功SSO转发,转发URL中带参数导致报错There was an unexpected error (type=Internal Server Error, status=500)