https://xss3cut10n3r.com/tags/privesc/Recent content in Privesc on XSS3cut10n3rHugoen-USTue, 26 Aug 2025 00:00:00 +0000https://xss3cut10n3r.com/posts/interactive-shells/Tue, 26 Aug 2025 00:00:00 +0000https://xss3cut10n3r.com/posts/interactive-shells/<p>Often when uploading a reverse shell on a webserver we are dealing with non-interactive shell. This means it doesn&rsquo;t prompt us for user input or display output in real-time in a traditional terminal window.</p> <p>The biggest problem with a non-interactive shell is that you can&rsquo;t run <code>su</code> or <code>sudo</code>.</p> <p><strong>Useful ways to upgrade your shell to an interactive one:</strong></p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-python" data-lang="python"><span style="display:flex;"><span>python <span style="color:#f92672">-</span>c <span style="color:#e6db74">&#39;import pty; pty.spawn(&#34;/bin/sh&#34;)&#39;</span> </span></span></code></pre></div><p><strong>When to use it:</strong> Almost always the first go-to if Python is available on the target. After spawning, run Ctrl-Z and then stty raw -echo; fg on your local terminal to fully fix arrow keys and job control.</p>