Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
jayo78 authored May 22, 2020
1 parent d8fe35b commit 44877aa
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,9 @@ This is a persistent reverse shell that uses windows TCP sockets to communicate
6. wait for module code from listener to start the reverse shell
7. use CreateProcess() to start cmd.exe and pipe stdin/out/err to the socket

*since the cmd process is wrapped in a loop that accepts module codes from the listener the executable will stay connected even when the shell is exited*
*since the cmd process is wrapped in a loop that accepts module codes from the listener the backdoor will stay connected even when the shell is exited*

*If the executable loses connection to the listener it will continue to beacon every 5 seconds to re-establish connection which could raise a red flag for Anti-virus*
*If the backdoor loses connection to the listener it will continue to beacon every 5 seconds to re-establish connection which could raise a red flag for Anti-virus*

### Notes:

Expand Down

0 comments on commit 44877aa

Please sign in to comment.