Summary

At the beginning of this chapter, we explored what a reverse connection and reverse shell connection is using tools such as netcat, ncat, openssl, socat, cryptcat, and powercat. We then tried different payloads to get reverse shell connections using Metasploit—reverse_tcp, reverse_tcp_rc4, and reverse_https. We then saw the enhanced version of reverse_https by using a custom SSL certificate with an impersonation technique, a meterpreter hijacking case scenario, paranoid mode, and by getting a meterpreter session over ngrok. Finally, we provided you with a cheat sheet that you can refer to whenever you want a reverse shell.