simple shells running under netcat or a basic socket program/script have a suboptimal user experience

0001-01-01

A common user experience shortcoming when catching reverse shells is the lack of a TTY/PTY in the session.

Pressing Control-C in a standard netcat session will send a SIGINT signal to netcat, killing the shell. This causes the attacker to have to re-exploit the machine or simply lose access to the machine.

Standard shell features such as tab completion, using the arrow keys, and being able to use interactive software such as text editors or pagers is not possible.

Attackers may opt into upgrading their vanilla reverse shell with a number of methods.


Links to this note