当前位置:网站首页>What is a rebound shell? What's the use of bouncing shells?
What is a rebound shell? What's the use of bouncing shells?
2022-07-27 07:54:00 【nginx】
Simply speaking ,Shell Is the interface to implement user commands , Through this interface, we can control the computer , Like the ones that we see all the time ssh It's the execution Shell Command to control the remote server .
That rebound Shell What is? ? Its English name is Reverse Shell, What exactly do you do ? That is, the control end first listens to a certain TCP/UDP port , Then the controlled end sends a request to this port , At the same time, transfer the input and output of your command line to the control end , Thus, the control end can input commands to control the controlled end .
for instance , We have two mainframes A、B, We finally want to achieve in A Up control B. So if you use positive Shell, In fact, in the A On the input B The connection address of , Such as through ssh Connect to B, After successful connection , We can do that A Control by command B 了 .
If you use reverse Shell, That is in A Open a listening port first , And then let B De link A This port of , After successful connection ,A This side can be controlled by command B 了 .
rebound shell What's the usage? ?
Or the original example , We want to use A To control B, If you want to use ssh Wait for the command to control , That has to be input B Of sshd Address or port, right ? But in many cases , Due to the firewall 、 Security group 、 LAN 、NAT Wait for a reason , We can't actually connect directly to B Of , such as :
A Although there is a public network IP, but B It's a machine on the intranet ,A You can't connect directly to B On .
B Firewall or security group restrictions are opened on ,sshd Service port for 22 It's closed .
B It's a dial-up host , Its IP The address changes frequently .
If B Being attacked , We want to make B towards A Report your situation , Then you need to B Take the initiative to connect A.
If this is the case , We can use rebound Shell use A To control B 了 .
边栏推荐
猜你喜欢

The first open source MySQL native HTAP database in China will be released soon! Look at the three highlights first, limited to the surrounding areas, waiting for you~

物来顺应,未来不迎,当时不杂,既过不恋

Enhancement: BTE process introduction

SQL labs SQL injection platform - level 1 less-1 get - error based - Single Quotes - string (get single quote character injection based on errors)

如何获取广告服务流量变现数据,助力广告效果分析?

擎创科技加入龙蜥社区,共建智能运维平台新生态

C language programming | program compilation and preprocessing

Installation and use of apifox

鲁迅:我不记得说没说过,要不你自己查!

如何更新pip3?和Running pip as the ‘root‘ user can result in broken permissions and conflicting behaviour
随机推荐
Enhancement: BTE process introduction
模仿大佬制作的宿舍门禁系统(三)
国内首款开源MySQL原生HTAP数据库即将发布!三大亮点抢先看,限量周边等你来~
npm的使用
JS access cookie example
Usage scenarios for automated testing
Resttemplate connection pool configuration
shell脚本学习day01
Shell script learning day01
C language: random number + Hill sort
C语言:随机生成数+希尔排序
[stonedb class] introductory lesson 1: popular science of database knowledge
Day111.尚医通:集成NUXT框架、前台页面首页数据、医院详情页
Synchronized lock
想让照片中的云飘起来?视频编辑服务一键动效3步就能实现
C commissioned use cases
【已解决】单点登录成功SSO转发,转发URL中带参数导致报错There was an unexpected error (type=Internal Server Error, status=500)
【小程序】uniapp发行微信小程序上传失败Error: Error: {'errCode':-10008,'errMsg':'invalid ip...
End of year summary
shell awk相关练习