22.10.05

what is a bindshell?

A bindshell is a remote shell connection, similar to the connection a telnet client preforms to a telnet server. Any operating system supporting a TCP stack and a shell will have the potential to provide bindshell access.

Typically, when a system is successfully hacked/attacked by an exploit, it will execute code that sets up the bindshell listener. This allows access to the system from any device capable of connecting to the bindshell port.

There are various methods to setup a bindshell. For example, exploits use shellcode to spawn threads. From an operating level the tool commonly used is netcat, which can tunnel stdout and stdin over TCP connections.

synscan
A very quick half-open portscanner with optional multithreaded protocol specific probing tool.


ipsort
ipsort takes input from standard in, a file or list of files and sorts the ip addresses.


rfidtool
rfidtool is a linux command line tool for editing rfid tags. Functionality includes reading, writing, saving, loading and erasing. It currently supports ACGs PCMCIA/CF Multi-Tag Readers.


massresolve
This program performs reverse dns lookups for network blocks or an input file and supports multi threading.


kismet-parse
kismet-parse is a small perl script for parsing kismet network files. It displays information relating to the MAC address of the discovered access points and clients.