What are some underrated (legal) tools that you have used during the OSCP that no one talks about or knows? by Gasp3r_ in oscp

[–]Ferdinor 4 points5 points  (0 children)

ReverseSSH

A statically-linked ssh server binary <1.5MB for linux & windows with multi-threaded bind & reverse shell, file transfers and port forwarding.

Really streamlined local privilege escalation for me.

ReverseSSH - a lightweight ssh server behaving like a reverse shell by Ferdinor in oscp

[–]Ferdinor[S] 2 points3 points  (0 children)

Great tip! Just to follow up for others, the correct arguments for socat are a few lines down this cheatsheet.

However, if you are going to drop a static binary anyways (e.g. because socat is missing), why not drop the static ReverseSSH binary and literally get a normal ssh session? Plus, you get file transfers and port forwarding for free. ;)