Why My NahamSec HackingHub Reverse Shell Didn't Catch — and Why the Web Shell Was Enough
I ran into a classic CTF problem while working through a NahamSec HackingHub web lab: I had working command execution through a web shell, but my reverse shell refused to connect back to my machine.
The funny part was I didn’t actually need the reverse shell at all.
The setup
The target exposed a PHP endpoint that allowed me to execute commands through a cmd parameter. Once I confirmed command execution worked, I tried to upgrade the web shell to a proper interactive Bash reverse shell.