What Happens In a "Shell Upgrade"? 

Thank you! I spent way longer than I'm proud to admit on those diagrams. Glad to hear they were useful.

Anything you want to see?

@@0xdf Thank you for asking. This video was awesome by the way. Was so exited that I forgot to mention that. ;) With that out of the way: I was thinking about what you've said: "I used the pty shell upgrade for years without actually knowing what it does." and I have a bunch of those things. When I am doing HTB I have sort of an intuition for what vulns I need to search and how to exploit them, but often I could not tell you why that vulnerability is there and how it could be fixed. Say XXE. I can test for it and exploit it. I know what XXE does and how it works from an attackers point of view. But couldn't explain why that vuln is there and what to do to fix it. What config or code needs to be touched? And this can be applied to many HTB typical attack scenarios. XXE is the only one that comes to mind right now - but picture it as an example. Don't know, was that somewhat helpful as an answer?

@Elijah Rodgers Done on the playlist. Sorry for that oversight, I thought it was already there. I'll think on those suggestions. Thank you for them!

@@maxmusterspace6037 Sure. I think in my head diving into an in depth look at an attack and how it works is a bit different from looking at a technique and how it works, but still could be interesting for sure. I'll think about if that's something I can pull something together on. Thanks for the input.

@@0xdf The things that the migrate command from metasploit does behind the scenes would be interesting and useful ( wondered some time ago about it, searched some things online but didn't find a proper explanation, even I kinda have an idea about what is does)

Thanks!

Interesting. Never thought about that one before. Not sure if I can do it justice or not. I'll add it to my list of things to look into.

I map it to Ctrl+a personally.

Interesting. I've never seriously used zsh, so I have no idea...

@@0xdf Let me make it clear. The new kali comes with a zsh terminal. Now when you catch a reverse shell as bash on the zsh and do all the necessary stuff to upgrade the shell...running CTRL + C closes the terminal.. I guess its clear now

Yes, Kali did make that change. I haven't used Kali in years, so I really don't have hands on experience with it. That said, I heard as long as you run 'stty raw -echo; fg' on one line it works the same. But haven't confirmed that on my own.

@@0xdf Alright. Well noted.

before or after "upgrade"?

@@0xdf wherever required. In this case I think it was for setting stty to revert it after you had set it to o.

i use that for windows, but prefer these techniques for linux

@@0xdf I use them a lot too if python is installed on the target. but sometimes it isn't one some docker containers. But I have a better understanding of how TTY works now. Thanks for the video