Upgrading to Fully Interactive TTY Shells

Practical TTY Upgrade & Spawn Methods

Below are my go-to techniques for upgrading or spawning a TTY shell after gaining access. These cover both reliable quick wins and full-featured setups.

---

1. Most Reliable (Simple & Solid)

/usr/bin/script -qc /bin/bash /dev/null

✅ Works almost everywhere⚠️ Missing some advanced features, but stable

---

2. Python One-Liners (Reliable & Easy)

Python 2:

python -c 'import pty; pty.spawn("/bin/bash")'
/usr/bin/python -c 'import pty; pty.spawn("/bin/bash")'

Python 3:

python3 -c 'import pty; pty.spawn("/bin/bash")'
/usr/bin/python3 -c 'import pty; pty.spawn("/bin/bash")'

---

3. Full TTY Upgrade (Preferred – SSH-like Experience)

# Step 1: Spawn Python PTY
python -c 'import pty; pty.spawn("/bin/bash")'
# Step 2: Background shell
Ctrl + Z
# Step 3: Get terminal size
stty -a | head -n1 | cut -d ';' -f 2-3 | cut -b2- | sed 's/; /\n/'
# Step 4: Bring shell back
stty raw -echo; fg
# Step 5: Set rows/cols (replace ROWS and COLS)
stty rows ROWS cols COLS
# Step 6: Enable colors
export TERM=xterm-256color
exec /bin/bash

---

4. Simpler Version (Slightly Less Functional)

python -c 'import pty; pty.spawn("/bin/bash")'
export TERM=xterm
# Ctrl + Z
stty raw -echo; fg

---

5. Other Quick Spawn Methods

Script

/usr/bin/script -qc /bin/bash /dev/null

Echo

echo os.system('/bin/bash')

SH

/bin/sh -i

Perl

perl -e 'exec "/bin/sh";'

Lua

lua -e "os.execute('/bin/sh')"

Ruby

ruby -e "exec '/bin/sh'"

---

Making the Shell Fully Interactive (Manual Method)

1. **Background shell:**Press Ctrl + Z

2. Raw mode without echo:

   stty raw -echo

3. Bring shell back:

   fg

4. Set terminal type:

   export TERM=xterm

This gives you tab autocomplete, arrow key history, and better interactive behavior.

---