论坛徽章:: 84

电梯直达

1楼 [收藏(0)] [报告]

发表于 2016-01-13 17:49 |只看该作者 |倒序浏览

本帖最后由 yjh777 于 2016-01-13 17:53 编辑

If bash was compiled with --enable-net-redirections, it has the capability of
using a special character device for both TCP and UDP redirections. These
redirections are used identically as STDIN/STDOUT/STDERR. The device entries
are 30,36 for /dev/tcp:

mknod /dev/tcp c 30 36

>From the bash reference:
/dev/tcp/host/port
If host is a valid hostname or Internet address, and port is an integer
port number or service name, Bash attempts to open a TCP connection to the
corresponding socket.

$ sudo mknod /dev/tcp c 30 36
$ for ((i=1; i<1024; i++)); do port=$i; timeout 1 bash -c "echo >/dev/tcp/$host/$port" 2>/dev/null && echo "port $port is open"; done
port 22 is open
port 631 is open

复制代码

不过下面的测试没有得道想要的结果，cat 没有得到数据，可能时请求报文格式不对？

$ exec 100<>/dev/tcp/127.0.0.1/8080; echo -e "GET / HTTP/1.0\n" >&100; cat <&100

复制代码

评分

参与人数 1	可用积分 +6	收起理由
MMMIX	+ 6	很给力!

查看全部评分

文库|博客

yjh777

大富大贵

论坛徽章:: 84

2楼 [报告]

发表于 2016-01-13 17:52 |只看该作者

$ exec 100<>/dev/tcp/www.163.com/80; echo -e "GET / HTTP/1.0\n" >&100; cat <&100
HTTP/1.0 500 Server Error
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>500 Server Error</h1>
An internal server error occured.
</body></html>
$ exec 100<>/dev/tcp/bbs.chinaunix.net/80; echo -e "GET / HTTP/1.0\n" >&100; cat <&100
HTTP/1.1 400 Bad Request
Server: NewDefend
Date: Wed, 13 Jan 2016 09:51:20 GMT
Content-Type: text/html
Content-Length: 170
Connection: close
<html>
<head><title>400 Bad Request</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<hr><center>Newdefend</center>
</body>
</html>