rapid7/metasploit-framework — pull request #224 by sempervictus (2012-03-08 04:07:13+00:00)
Title: Adds reverse shell via mknod and telnet

/dev/tcp isn't all that common, so this works by creating a pipe (FIFO block device) via mknod, pushing $(which $0) to it and deleting the pipe. Interestingly enough an established session remains live even when the file identifying the block device is removed.