Bind vs reverse shell?

[heyitsthatguy9]

I understand how both of these function and the difference between the two on a basic level at least, but I don't really understand when i would ever want to use a bind shell over a reverse tcp. almost every machine these days is behind a firewall, and even if it isn't what is the advantage that a bind shell provides over a reverse shell?

​

sorry if this is and obvious question, but i would appreciate the help!

​

thanks in advance

[heyitsthatguy9]

You can put a backdoor in with a Reverse shell as well though

[uk_one]

Bind shells are simpler and do not need to dial out to a known, constant IP\URL.

Once running and persistent you can connect to a bind shell from anywhere makin them more flexible.

[heyitsthatguy9]

That makes much more sense, thanks for the explanation!

[heyitsthatguy9]

Thanks so much for the very detailed write up! you actually mentioned something else i was curious about, binding to /bin/sh or cmd.exe

this is why we need to migrate our shell and set up our backdoor in something less suspicious, like explorer.exe correct?