MITRE ATLASCommand and Control

AML.T0072: Reverse Shell

Adversaries may utilize a reverse shell to communicate and control the victim system.

Typically, a user uses a client to connect to a remote machine which is listening for connections. With a reverse shell, the adversary is listening for incoming connections initiated from the victim system.

Standards mapping

References: https://atlas.mitre.org/techniques/AML.T0072

Where this fits in a TurboPentest engagement

TurboPentest's agentic pentest is powerful and covers a broad range of issues automatically. This particular class is best confirmed in a manual IntegSec engagement, where human pentesters apply deeper methodology and a larger context window than any automated pass.

Frequently asked questions

What is AML.T0072 Reverse Shell?

Adversaries may utilize a reverse shell to communicate and control the victim system. Typically, a user uses a client to connect to a remote machine which is listening for connections. With a reverse shell, the adversary is listening for incoming connections initiated from the victim system.

Which tactics does AML.T0072 belong to?

AML.T0072 maps to the Command and Control tactic.

Does TurboPentest test for Reverse Shell?

Related MITRE ATLAS techniques

Find these issues before an attacker does

TurboPentest runs an agentic AI pentest against your target and reports findings with proof, from $99 per target.

Start a $99 pentest