From 44877aa90884b3790bda35e2d4e77cedea619fe3 Mon Sep 17 00:00:00 2001 From: Jayson Hurst <46457801+jayo78@users.noreply.github.com> Date: Fri, 22 May 2020 15:25:43 -0700 Subject: [PATCH] Update README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index a1598bf..c57a838 100644 --- a/README.md +++ b/README.md @@ -11,9 +11,9 @@ This is a persistent reverse shell that uses windows TCP sockets to communicate 6. wait for module code from listener to start the reverse shell 7. use CreateProcess() to start cmd.exe and pipe stdin/out/err to the socket -*since the cmd process is wrapped in a loop that accepts module codes from the listener the executable will stay connected even when the shell is exited* +*since the cmd process is wrapped in a loop that accepts module codes from the listener the backdoor will stay connected even when the shell is exited* -*If the executable loses connection to the listener it will continue to beacon every 5 seconds to re-establish connection which could raise a red flag for Anti-virus* +*If the backdoor loses connection to the listener it will continue to beacon every 5 seconds to re-establish connection which could raise a red flag for Anti-virus* ### Notes: