Use Netcat to Spawn Reverse Shells & Connect to Other Computers [Tutorial]

[@MrKristian252]

Hacking doesn't need to be used in a bad way.. but it's a really good way to learn how the structure of these systems/technologies/software/code work. I love watching your videos, because it's information I've never heard about before...

[@Aditya-wg3lp]

Mr.Kristian252 im using it for scambaitin

[@jahazielvazquez7264]

Oh come on, let's be real here. Everyone here is trying to feed their evil curiosity

[@paultapping9510]

Shaper vs anarch. Or urbex vs housebreaking, I guess. Same means, different ends.

[@ismaelc.e8398]

W BIG POWA CUMS BIG RESPONSABILITY

[@somebody3271]

@@jahazielvazquez7264 true

[@ajopasoij9d00]

Ghost in the Shell!

[@SadKris]

...im so proud of this joke

[@bittylifts]

DO NOT LIKE, ITS AT 69

[@milathecat5454]

I love you destiny

[@CaptBoykin]

@6:20 "nc -l -p 6996 -e /bin/bash " does not perform a reverse shell. This is a bind shell.

[@krizsan0596]

It is a reverse shell since the server is calling back to the attacker

[@CaptBoykin]

@@krizsan0596 No. @6:10 he correctly references it as a backdoor (bindshell). A reverse shell would imply the incoming connection is running the prog (-e). The "shell" that is spawned via "-e" @6:20 is spawned on the host that is running nc (which is binding locally on that host with the "-l" option). It's doing zero 'dialing out' as it's a local listener.

[@realitynowassigned]

@@AaronmMcLean hush child.

[@realitynowassigned]

@@CaptBoykin thanks for pointing that out, its important. I specifically needed to look at reverse shells

[@jhde9067]

So ... What is a reverse shell? What's the different types of shells and their differences? Kinda confusing.

[@iyeetsecurity922]

I grew up loving any form of a puzzle. Then it continued with video games. That's the reason I enjoy hacking and lock picking. They're just puzzles waiting to be solved.

[@techslugz]

I am pretty sure I have the same addiction 😮

[@lelandclayton5462]

This trick has been around for a long time and harden IT security veterans know about it and have setup proper firewall rules and crap. A matter of fact this is in the book "Instant Netcat Starter" by K. C. Yerrid.

[@cy_wareye7395]

Your intro helps me focus before your tut

[@NullByteWHT]

I'm glad you like it! We shot it the one day we had a nice stabilizer

[@minibit0103]

Always nice to see basic techniques that are clear, keep the content flowing!

[@OG-PvP]

You're an inspiration and amazing teacher, found you via David Bombal and your videos have provided some of the most easiest to deliver education I have found on KZbin

[@pavelschannel-alittleoutof3532]

He has pictures of cats so therefore I trust him 100% :) He does explain very well without going on too much unlike others. I like his teaching methods. We need more people like this as you tube is full of useless teaching / tutorial videos that should be binned...

[@fredericaveline9207]

Good job! I'm hacker rookie, and I'm used to using metasploit framework without knowing the basics! So thanks.

[@NullByteWHT]

frédéric aveline thanks for watching! Tell all of your friends about us! 😃

[@GoranObal]

9:03 I'm pretty sure the article was for using Windows command prompt. There the type command is like cat in linux. The type command in linux is something else.

[@harism0]

I like the cat pictures in the background, fits in well 😂👏

[@oliverludwig6148]

1st background track is Lazerhawk - So far away, in case anyone is wondering.

[@younesmohssen8158]

What if you wanted to get a reverse shell but you didn't have physical access to the targeted computer?

[@phantomplayed]

Same question

[@Cesar-dt9nl]

If hacking wasnt good enough, now with lazerhawk this is flawless, thanks for the info

[@puppyofwrath]

That is a big watch. This dude knows what time it is.

[@silverhawktc]

Great content as always, keep up the good work! I noticed you use some really good songs in the background :D. Would you please tell us which you use in the description? That would be great!

[@Danieloani]

I think don't understand the concept. The point of this video is to show how to control a remote computer using netcat. However, in order to make something work, at first, you need to open a port on the "remote computer" (which as hacker' you don't have access to). Is there a way to convince the target to open a port and run the commands via a bash?

[@Hari-888]

This video was amazing dude, I finally understood how exactly a reverse shell works

[@fastexpand]

The website you’re attacking won’t just set up ncat for you to attack like that though right? How do you make it work if you only have control of the attacking computer??

[@adryelgainza1530]

im pretty new to this but i assume that this is done via an exploit. Im not sure. Its been two months so correct me if im wrong

[@fastexpand]

​@@adryelgainza1530 Yeah I've since learned that you have to get access through an exploit before you can run the reverse shell

[@sefiyt12]

@@fastexpand do you use metasploit?

[@fastexpand]

@@sefiyt12 I'm in the process of learning that one

[@poopingturtle7978]

So do you need to have the backdoor? If so how would you install it remotely?

[@davidkostoski]

If he knew that he wouldn't be making videos that explain BASICS. He'd then have a 500k job as a security specialist.

[@astralseeker]

Music: Swedish progressive trance project: Vibrasphere Title: Sweet September ... no credit you're welcome

[@kenny-kvibe]

This nc is really really awesome to use if you have to copy some text to other devices running linux. I mean It's like Copy-Paste over the local network, very convenient!

[@GodKeks-]

Hello thanks i have a quetschen what u using in the window? Dell-3 what is this ?

[@g.s.3389]

can you please make a video on how to make an headless rpi with kali so that wifi works without the need of a GUI. thx

[@Daniel_CLopes]

Great, great, great. Could you kindly upload a video explaining how to generate nmap reports, import report to metasploit framework and exploit vulnerability using scripts? I know we can find videos out there but I believe you guys can do it MUCH better.

[@craigheard2504]

Thanks a lot. You explained this extremely well. this ability is powerful, useful and terrifying.

[@kohibzoparel4657]

Great fun though remember to cover that camera that's the best way to stay safe online 😅😅😅😅😅😅

[@rayhanfoinshola7037]

I have a question do you need net cat on both the attacking device and the device that is attacking.

[@FirstLast-hm8oz]

My question is how to start a "nc -l -p 9669 -e /bin/bash " on the server if I am not in yet.

[@Wastelander1972]

If you’re using a Linux terminal, chances are you can chain the command... you could try piping it, but IDK if you will experience the same results with piping. Chain with ; pipe with | . Ethical hacking only, please.

[@CaptBoykin]

RCE would be required first. Netcat using -l is not a reverse shell. It is a bind shell.

[@hyperdragon1013]

ok let me help you and people with the same question basically get in

[@FirstLast-hm8oz]

@@hyperdragon1013 I cannot get an answer. Something is hanging in an endless delay. How can send an answer ?

[@FirstLast-hm8oz]

@@CaptBoykin What is RCE ? There are abundant meanings for this. Were is the answer to my question hidden ?

[@dualsensedynasty]

do you have anything like getting reverse shell from Public network and Public IP

[@Dave-kq7gv]

combine this with a n00b guide for cron...I'm a newb at both but see how cool it'd be! Cool content all around, good sir!

[@acostantino7624]

what are the pros using netcat insead of ssh?

[@DDBAA24]

Well, in regards to transferring files over the network NC seems faster it could be my imagination but it does. Also to speed up SSH passing the -C flag will enable compression in the SSH session which does seem to speed things up slightly . I digress. Getting to the question, this is a chicken and the egg type question, in order to use NC on a remote system you would already have had to gain access to it , so to do that you would use SSH. So you wouldn't be able to use NC unless you had a shell already via SSH so therefore there are no pros because one doesn't exist without the other, no shell= no netcat. In order to use NC you would have to setup a listener (the server) and connect to the listener ( you the client). Hope that brings some clarity.

[@jacoblessard8213]

I know this is 3 years old but someone please help, I'm trying to figure out a way I can do exactly this but just by using a rogue access point. In theory, if someone is connected to my rogue access point shouldn't I be able to then connect to it with netcat and get a reverse shell on them. I really just want to know more about modern attacks that are done with rogue access points.

[@VetbossOfficial]

thank you. but can I save the computer connection so I can get access in the future as well? Because I want to connect to it more than once.

[@CrackerWeb]

To use the nc the client system(server) must have nc install, am i right?

[@Mong3]

Please talk about C2's (command & control) and Payloads generators with build/execution time polymorphisms.

[@DSAhmed]

why do you run nmap just to get priceline's IP address? seems a bit much. (dig, or nslookup seems to work just fine, plus you know 80/443 will be open)

[@asipalacios8701]

does it still work if you dont have physical access to both computers? is it really hacking or do you show connection with netcat here?

[@lightyagami1456]

8:54 What the heck! Am I unable to follow here? I thought that the MacOS had apparently became the attacker and the Kali system was victim since it can exfiltrate and run files from Kali. Pls reply which is the attacker machine here????

[@leonardofelippine9781]

Yes, I also got lost during the explanation. I believe the roles were reversed at some point

[@dr.z1657]

Light Yagami I got lost here as well.

[@KamilKowalski-lf3yt]

can you help me with it ?

[@KamilKowalski-lf3yt]

@@leonardofelippine9781 can you help me with it ?

[@nemo2225]

You can simply ping the address for ip resolving. That's more anonymous than running nmap scan, right?

[@sabrario]

what laptop do you have? Do you use any other system?

[@haskeww8193]

I am very new i would love to be able to identify that a computer is compromised i don't have access to certain files despite being the administrator, i have played around downloaded comodo which at least allows me to deny processes from executing but i get lost looking threw processes, weird files, would love how to use a packet sniffer ect i really need to get a better foundation of the basics anything you recommend?

[@2ubZ3r0]

With Quick Batch File Compiler can build an hiden .exe wit Netcat parameters same a .bat File, can use to build a small Backdoor

[@jannmoon]

really loving the new haircut bro

[@imrwe9691]

Your just awesome man .We would love if you put up a video of hacking these microsoft technician scammers and shutting down their network .It would be fun.

[@LiquidTension187]

Hey great video !!! Very informative (: just curious, how big of a file can you transfer on LAN using netcat ?

[@PianoShawn]

i've been waiting for this for a very long time

[@sireatsalot398]

same

[@bj76681]

Hi Null Byte, I tried this but am not getting the connection establed on the listener side. it's showing " Listening on [any] 88......" after that no results. I tried adding the IP in ufw but still no luck. can help me to resolve this issue?

[@skyelf4270]

Hello, I try to connect two of my window laptop but keep getting this error message, do you know why? Ncat: An existing connection was forcibly closed by the remote host.

[@GameChannelOfficial]

How to connect to nc session vis Windows????

[@whyarewealwaysyelling]

Is it true you turned down a guest appearance on mr. Robot?

[@paulredman1520]

do both of the computers have to be using kali?

[@larbiboudibaboudiba5335]

u didnt montion the netcat -e "specifique version of netcat that can execute command" | | echo "nice work bro "

[@ko-Daegu]

larbiboudiba boudiba 6:33 He did it to execute bash

[@ko-Daegu]

larbiboudiba boudiba You wrote netcat -e So I thought that you where talking about nc -e I don’t know evil netcat this is a new for me will check it out Thankx

[@ziomek96011]

You can still make a reverse shell by reading and writing to a named pipe, you can find info about how to do it in the man pages.

[@utshabchouhan1225]

Sir, I have access to upload any file in C:\Windows\Temp folder of (IIS/Windows server) .Can I get reverse connection just by uploading a reverse shell ?

[@8080VB]

yes use -e

[@TheCuriousM1nd]

What laptop did you use sir!

[@roya2045]

Hi Bro I have a system in my network I know its IP is there a way to access the system without using a payload I want to access its drives. Please reply

[@Software-ns9li]

I am trying to get a reverse shell on a PC with nothing more than an IP address, how do i accomplish this? i have a lab setup with different internet sources etc, all i can get is an IP, how do i get a revere shell with just an IP?, I have tried NetCat and MSFvenom but have failed

[@geekster3092]

but how did you get the server installed on the victims pc withou them knowing?

[@sinan5488]

FINALLY A GOOD TUTORIAL BY A GOOD HACKER

[@bobbynewport3332]

🤓🤓no FIFO persistent backdoor? What if -e isn't available?

[@mahigiri8062]

*Can somebody help me please* I used 'XEEXE' to create payloads but after running it on another windows, through where should I listen to it. I tried meterpreter but no connection was established. I believe xeexe is something different and might require something else. How can I establish connection please help

[@StefanRows]

Kody, amazing Video as always! Can't wait for the next one!

[@tlouik]

what laptop do u use?

[@kingslayer9097]

Love the cats behind u

[@amarchhabra2175]

Thanks for the great video. The Null Byte web page seems to be down. Will it eventually be brought back online?

[@Akira29H]

can you demonstrate how to use from kali to windows?

[@Anonymous-vh6kp]

You would need access to the target to run netcat in the first place, so why not just execute from whatever shell you have already gained access to?

[@Anonymous-vh6kp]

Oh, so let's say you managed to exploit a vulnerbaility and was able to perform some kind of remote code execution, you would execute a netcat reverse shell. Now you have back door available to connect to whenever you want.

[@lux-music6321]

3:35 if I try to connect to the server I just get (Unknown) [*my ip] 8888 (?) : Connection refused I'm running it from 2 VM's on the same computer

[@velociraptux7]

I thought what I'd do was I'd pretend I was one of those deaf-mutes

[@spiceyswag7519]

Does this work Over WAN?

[@debbiedaley6989]

Hello...I sent u a list of questions 4 days ago using Termux....can u please help me ?????

[@romandp4742]

how do i get the terminal command thing?

[@mrswdishboi3343]

After using nc -l 8888 my screen just freezes Can anybody help?

[@seekovebot6438]

it's not frozen it's waiting for a connection to be established

[@xdtimetoastergaming273]

Hey I know this is a year old but does netcat the same as ncat. Cause I have something called ncat on my computer

[@mnageh-bo1mm]

Can you do this with metasplot ?

[@stacyhoff8882]

Why did you blurr the kali linux date at the top

[@Uneke]

You really hate Priceline don’t you! 😂 I called out what site you were gonna pull an ip from before you said it 😂 Amazing! Perhaps one day you could make a video with the story behind it? Maybe call it “in the life of null byte, the shady practices of a crappy website” haha

[@nathanpetronzio6442]

I keep getting "protocol mismatch" when attempting to establish an SSH connection

[@mercilesspidermissesbaby_w4737]

hey could you please give me the link to the download you used, im having a hard time trusting any links

[@mihaiioc.3809]

Don't send messages while riding a horse

[@MinerKingX]

how can you close the listener tab without loosing the connection

[@johnvardy9559]

you are amazing,how can i see uf is activate netcat?:/

[@Morpheus776]

i wish i had the computer knowledge this guy has. where should one start?

[@chronewhite4197]

I'm lucky because I learned what recon and osint is just 2 days ago, so I'm not confused by these terms)

[@Ниодин-ж1е]

can the server get a reverse shell on the client?

[@v.6023]

Dude... I can't even make the connection between both computers, even though I connect the client to the server-port messages won't happen as they did with you...

[@romangrace2507]

use a -pn the host computer may be blocking pings

[@v.6023]

@@romangrace2507 I believe it was because I can't detect wireless networks due to VM detecting connection through cable? otherwise pls elaborate. Thanks!

[@v.6023]

@@romangrace2507 Would I include it before writing the ip address? is it possible that it happens because I don't have wireless connection? vm detects wired connection.

[@andreimerla924]

resource temporarily unavailable i got this error when i tried to connect to the server

[@nekistunter8569]

you sound like more enthusiastic Daily Dose Of Internet

[@htiguy1]

Very interesting, you have some great content. Thank you.

[@NullByteWHT]

htiguy1 thanks for watching! Tell all of your friends about us! 😃

[@tadakiga6611]

why did you use port 6996?

[@ltwotimesl]

Man is SMACKIN' those keys.

[@NullByteWHT]

Like little tiny sledgehammers on every finger.

[@jackrichards3697]

You've been a great directory ;) for basic info over the last few years. Thank you. Keep it coming!

[@vanvleermuizen926]

Is that HOME in the background?

[@oliverludwig6148]

No, Lazerhawk - So far away

[@debbiedaley6989]

Can u Please Help ..I also..sent a message 16 hrs ago ...same perspn... R u available ?? Its 8.09 Eastern time here...hope to hear from u.. wpuld truly appreciste

[@84xyzabc]

It would not have hurt if a larger font size in terminal was used.

[@danielbenisti3664]

what is reverse shell?

[@debbiedaley6989]

Im using termux .....so do I use apt get install or the (nc -l 8888)to install Also If doin jus a priv attack....do we need to type NC-l try.txt...ALL U TYPE INTO NETCAT COMPUTER TO TEST N INSTALL ARMEGGETON or just stay in "root" linux computer n not add lines ur putting into netcat screen ..confused as to if I'm suppose to b installing armeggeton which u didnt do in linux but u did in netcat computer .And ADD COMMANDS U PUT INTO NETCAT BUT NOT LINUX FOR TESTING ALSO ....PLEASE. HELP..BEEN TRYIN FOR DAYS WEEKS N MONTHS TO PERFORM THIS REMOTE ATTACK CUZ ITS THE M9DT IMPORTSNT THING IN MY LIFE SO I HAVE PROOF N CAN GET A DIV IN MASS U NEED PROOF ...PLEASE LMK COMMANDS FOR ONLY PRIVSTE ATTACK N WILL THIS WORK IF HE HAS A PRIV NETWORK N HAS ANTI VIRUS SOFTWARE PROTECTING HIS PHONE ?? ....THE ONLY COMMANDS I HAVE FOR PRIV IS. Line 1...APT GET INSTALLL get netcat. THEN line 2... NC THEN HIS IP 8888 THEN LINE 3 is his IP AGAIN BUT WITH 6996 ??????? DONT SOUND RIGHT...THEN LINE 4 IS NC -l -p 6996 -e /bin/bash n Line 4 nc -l -p 8888 Line 5 cat '/root/try.txt NC then IP then 8888....so 5 lines ...did not see u type any other in linic for Priv attack .that's why confused. If commands u put in netcat should have been put into termux for priv attack...please. n so sorry if I've confused the heck out of u....I dont have much time left ..PLEASS HELP

[@hengamez_1879]

dose it work 4mac?

[@melting9419]

nice haircut!

[@Cookiekeks]

You are staring into my soul

[@RBSRG]

Link to the anime wallpaper?