an infosec newbie's tech blog

this part is about port forwarding/mapping

port forwarding demo

a socks5 proxy via port-fwd module

View comments.

switching to prompt_toolkit

python's readline module sucks

heres how:

python's readline cannot handle ANSI color codes properly, when i try to use ANSI color code in the prompt message, history browsing (via up/down key) fucks the prompt up

here's the code, it's from python's doc, i made a small …

View comments.

this part is about reverse shell

how to make your reverse shell suck less

take a look at pentestmonkey's Reverse Shell Cheat Sheet, which gives you a collection of reverse shell one-liners. each of the one-liners does the same thing -- establish a TCP connection to you, then execute a shell …

View comments.

su -c is convenient to use, but, when you use it in your LPE exploit, hoping it to execute your command, you will probably get

su: must be run from a terminal

the obvious solution is give it a "terminal" to run from

there's a forkpty function provided by pty …

View comments.