olemus
kaugkestakood, mis loob ründeks ühenduse
ohvri arvutilt ründaja arvuti kuulavale pordile;
eeldab, et tulemüürid sageli ei filtreeri väljuvaid ühendusi
= remote shellcode that for the attack establishes a connection from the victim's computer to the listening port of the attacker's computer; assumes that firewalls often do not filter outbound connections

ülevaateid
http://resources.infosecinstitute.com/icmp-reverse-shell/

https://wiki.ubuntu.com/ReverseShell

tõrje
https://triagingx.com/img/website_images/resource_images/776444019_detectreverseshell.pdf

http://help.sonicwall.com/help/sw/eng/9530/26/2/3/content/Application_Control.065.23.htm

https://askubuntu.com/questions/834758/how-to-secure-ubuntu-from-reverse-shell