Lion Cipher Lab
Get and stabilize a reverse shell in your own lab
- Penetration Testing / Red Team
- Intermediate
- ~45 min
- Free · no account required
Why it matters
Almost every real intrusion ends the same way: the attacker gets code execution on a target and immediately wants an interactive command line on it. A reverse shell is how they get one, and it's the workhorse of post-exploitation precisely because it beats the firewall — the target dials OUT to the attacker, and outbound traffic is usually allowed even when inbound is blocked. If you're going into offensive work you'll run this constantly; if you're going into defense, this is the exact behavior your detections have to catch, and 'walk me through catching and stabilizing a shell' is a classic…
What you'll learn
- reverse shells
- netcat/ncat listeners
- bash /dev/tcp
- TTY/pty stabilization
- egress & EDR detection thinking
- post-exploitation basics
Steps in this lab
- Set up your two-sided lab — and the rule that never bends
- Reverse vs bind shell — and why reverse almost always wins
- Start the listener on the ATTACKER
- Connect back from the VICTIM with the classic bash one-liner
- Meet your 'dumb' shell — and feel why it's painful
- Stabilize it — the TTY upgrade dance
- The defender's view — how this gets caught
- What you did, and where it goes next