Windows reverse Shell
From: NetNinja (netninja@hotmail.kg)
Date: 02/03/03
- Previous message: Gregory Duchemin: "Re: slocate vulnerability"
- Next in thread: 3APA3A: "Re: Windows reverse Shell"
- Reply: 3APA3A: "Re: Windows reverse Shell"
- Reply: sk: "Re: Windows reverse Shell"
- Maybe reply: Berend-Jan Wever: "Re: Windows reverse Shell"
- Maybe reply: Ali Saifullah Khan: "Re: Windows reverse Shell"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 4 Feb 2003 01:37:45 +0600 From: NetNinja <netninja@hotmail.kg> To: vuln-dev@securityfocus.com
Hello guys,
David Litchfield in his Blackhat talk, talked about using socket handle
from WSASocket() and pass that handle as a parameter to stdin, stdout
and stderr for CreateProcess function. By doin this way his reverse
cmd shellcode becomes much smaller. I tried coding that reverse
command shell in C, but couldnt get it to work. It simply connects to
my listening netcat listener and then disconnects. David Litchfield
used 4 functions to achieva that WSASocket, bind, connect and
CreateProcess. A lil help would b appreciated on building this reverse
cmd shell. thanx.
-- Best regards, A*** mailto:netninja@hotmail.kg
- Next message: Philip Stoev: "Possible DOS against search engines?"
- Previous message: Gregory Duchemin: "Re: slocate vulnerability"
- Next in thread: 3APA3A: "Re: Windows reverse Shell"
- Reply: 3APA3A: "Re: Windows reverse Shell"
- Reply: sk: "Re: Windows reverse Shell"
- Maybe reply: Berend-Jan Wever: "Re: Windows reverse Shell"
- Maybe reply: Ali Saifullah Khan: "Re: Windows reverse Shell"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]