Hacking doesn't need to be used in a bad way.. but it's a really good way to learn how the structure of these systems/technologies/software/code work. I love watching your videos, because it's information I've never heard about before...
@@krizsan0596 No. @6:10 he correctly references it as a backdoor (bindshell). A reverse shell would imply the incoming connection is running the prog (-e). The "shell" that is spawned via "-e" @6:20 is spawned on the host that is running nc (which is binding locally on that host with the "-l" option). It's doing zero 'dialing out' as it's a local listener.
He has pictures of cats so therefore I trust him 100% :) He does explain very well without going on too much unlike others. I like his teaching methods. We need more people like this as you tube is full of useless teaching / tutorial videos that should be binned...
You're an inspiration and amazing teacher, found you via David Bombal and your videos have provided some of the most easiest to deliver education I have found on TH-cam
I grew up loving any form of a puzzle. Then it continued with video games. That's the reason I enjoy hacking and lock picking. They're just puzzles waiting to be solved.
9:03 I'm pretty sure the article was for using Windows command prompt. There the type command is like cat in linux. The type command in linux is something else.
This trick has been around for a long time and harden IT security veterans know about it and have setup proper firewall rules and crap. A matter of fact this is in the book "Instant Netcat Starter" by K. C. Yerrid.
8:54 What the heck! Am I unable to follow here? I thought that the MacOS had apparently became the attacker and the Kali system was victim since it can exfiltrate and run files from Kali. Pls reply which is the attacker machine here????
Great content as always, keep up the good work! I noticed you use some really good songs in the background :D. Would you please tell us which you use in the description? That would be great!
The website you’re attacking won’t just set up ncat for you to attack like that though right? How do you make it work if you only have control of the attacking computer??
Great, great, great. Could you kindly upload a video explaining how to generate nmap reports, import report to metasploit framework and exploit vulnerability using scripts? I know we can find videos out there but I believe you guys can do it MUCH better.
This nc is really really awesome to use if you have to copy some text to other devices running linux. I mean It's like Copy-Paste over the local network, very convenient!
I think don't understand the concept. The point of this video is to show how to control a remote computer using netcat. However, in order to make something work, at first, you need to open a port on the "remote computer" (which as hacker' you don't have access to). Is there a way to convince the target to open a port and run the commands via a bash?
Your just awesome man .We would love if you put up a video of hacking these microsoft technician scammers and shutting down their network .It would be fun.
If you’re using a Linux terminal, chances are you can chain the command... you could try piping it, but IDK if you will experience the same results with piping. Chain with ; pipe with | . Ethical hacking only, please.
Well, in regards to transferring files over the network NC seems faster it could be my imagination but it does. Also to speed up SSH passing the -C flag will enable compression in the SSH session which does seem to speed things up slightly . I digress. Getting to the question, this is a chicken and the egg type question, in order to use NC on a remote system you would already have had to gain access to it , so to do that you would use SSH. So you wouldn't be able to use NC unless you had a shell already via SSH so therefore there are no pros because one doesn't exist without the other, no shell= no netcat. In order to use NC you would have to setup a listener (the server) and connect to the listener ( you the client). Hope that brings some clarity.
I am very new i would love to be able to identify that a computer is compromised i don't have access to certain files despite being the administrator, i have played around downloaded comodo which at least allows me to deny processes from executing but i get lost looking threw processes, weird files, would love how to use a packet sniffer ect i really need to get a better foundation of the basics anything you recommend?
why do you run nmap just to get priceline's IP address? seems a bit much. (dig, or nslookup seems to work just fine, plus you know 80/443 will be open)
I know this is 3 years old but someone please help, I'm trying to figure out a way I can do exactly this but just by using a rogue access point. In theory, if someone is connected to my rogue access point shouldn't I be able to then connect to it with netcat and get a reverse shell on them. I really just want to know more about modern attacks that are done with rogue access points.
You really hate Priceline don’t you! 😂 I called out what site you were gonna pull an ip from before you said it 😂 Amazing! Perhaps one day you could make a video with the story behind it? Maybe call it “in the life of null byte, the shady practices of a crappy website” haha
Hello, I try to connect two of my window laptop but keep getting this error message, do you know why? Ncat: An existing connection was forcibly closed by the remote host.
Hi Bro I have a system in my network I know its IP is there a way to access the system without using a payload I want to access its drives. Please reply
Hi Null Byte, I tried this but am not getting the connection establed on the listener side. it's showing " Listening on [any] 88......" after that no results. I tried adding the IP in ufw but still no luck. can help me to resolve this issue?
Sir, I have access to upload any file in C:\Windows\Temp folder of (IIS/Windows server) .Can I get reverse connection just by uploading a reverse shell ?
larbiboudiba boudiba You wrote netcat -e So I thought that you where talking about nc -e I don’t know evil netcat this is a new for me will check it out Thankx
I am trying to get a reverse shell on a PC with nothing more than an IP address, how do i accomplish this? i have a lab setup with different internet sources etc, all i can get is an IP, how do i get a revere shell with just an IP?, I have tried NetCat and MSFvenom but have failed
Oh, so let's say you managed to exploit a vulnerbaility and was able to perform some kind of remote code execution, you would execute a netcat reverse shell. Now you have back door available to connect to whenever you want.
*Can somebody help me please* I used 'XEEXE' to create payloads but after running it on another windows, through where should I listen to it. I tried meterpreter but no connection was established. I believe xeexe is something different and might require something else. How can I establish connection please help
Dude... I can't even make the connection between both computers, even though I connect the client to the server-port messages won't happen as they did with you...
@@romangrace2507 I believe it was because I can't detect wireless networks due to VM detecting connection through cable? otherwise pls elaborate. Thanks!
@@romangrace2507 Would I include it before writing the ip address? is it possible that it happens because I don't have wireless connection? vm detects wired connection.
![Use Nmap for Tactical Network Reconnaissance [Tutorial]](http://i.ytimg.com/vi/ltEFbi_I2KY/mqdefault.jpg)
![Use Nmap for Tactical Network Reconnaissance [Tutorial]](/img/tr.png)
![Search for Vulnerable Devices Around the World with Shodan [Tutorial]](http://i.ytimg.com/vi/oDkg1zz6xlw/mqdefault.jpg)
Hacking doesn't need to be used in a bad way.. but it's a really good way to learn how the structure of these systems/technologies/software/code work.
I love watching your videos, because it's information I've never heard about before...
Mr.Kristian252 im using it for scambaitin
Oh come on, let's be real here. Everyone here is trying to feed their evil curiosity
Shaper vs anarch. Or urbex vs housebreaking, I guess. Same means, different ends.
W BIG POWA CUMS BIG RESPONSABILITY
@@jahazielvazquez7264 true
Ghost in the Shell!
...im so proud of this joke
DO NOT LIKE, ITS AT 69
I love you destiny
@6:20
"nc -l -p 6996 -e /bin/bash " does not perform a reverse shell. This is a bind shell.
It is a reverse shell since the server is calling back to the attacker
@@krizsan0596 No. @6:10 he correctly references it as a backdoor (bindshell). A reverse shell would imply the incoming connection is running the prog (-e). The "shell" that is spawned via "-e" @6:20 is spawned on the host that is running nc (which is binding locally on that host with the "-l" option). It's doing zero 'dialing out' as it's a local listener.
@@AaronmMcLean hush child.
@@CaptBoykin thanks for pointing that out, its important. I specifically needed to look at reverse shells
So ... What is a reverse shell? What's the different types of shells and their differences?
Kinda confusing.
Always nice to see basic techniques that are clear, keep the content flowing!
He has pictures of cats so therefore I trust him 100% :) He does explain very well without going on too much unlike others. I like his teaching methods. We need more people like this as you tube is full of useless teaching / tutorial videos that should be binned...
You're an inspiration and amazing teacher, found you via David Bombal and your videos have provided some of the most easiest to deliver education I have found on TH-cam
I grew up loving any form of a puzzle. Then it continued with video games. That's the reason I enjoy hacking and lock picking. They're just puzzles waiting to be solved.
I am pretty sure I have the same addiction 😮
I like the cat pictures in the background, fits in well 😂👏
9:03 I'm pretty sure the article was for using Windows command prompt. There the type command is like cat in linux. The type command in linux is something else.
Your intro helps me focus before your tut
I'm glad you like it! We shot it the one day we had a nice stabilizer
This trick has been around for a long time and harden IT security veterans know about it and have setup proper firewall rules and crap. A matter of fact this is in the book "Instant Netcat Starter" by K. C. Yerrid.
This video was amazing dude, I finally understood how exactly a reverse shell works
8:54 What the heck! Am I unable to follow here? I thought that the MacOS had apparently became the attacker and the Kali system was victim since it can exfiltrate and run files from Kali. Pls reply which is the attacker machine here????
Yes, I also got lost during the explanation. I believe the roles were reversed at some point
Light Yagami
I got lost here as well.
can you help me with it ?
@@leonardofelippine9781 can you help me with it ?
Good job! I'm hacker rookie, and
I'm used to using metasploit framework without knowing the basics! So thanks.
frédéric aveline thanks for watching! Tell all of your friends about us! 😃
That is a big watch. This dude knows what time it is.
Thanks a lot. You explained this extremely well. this ability is powerful, useful and terrifying.
Great fun though remember to cover that camera that's the best way to stay safe online 😅😅😅😅😅😅
If hacking wasnt good enough, now with lazerhawk this is flawless, thanks for the info
Great content as always, keep up the good work! I noticed you use some really good songs in the background :D. Would you please tell us which you use in the description? That would be great!
I have a question do you need net cat on both the attacking device and the device that is attacking.
1st background track is Lazerhawk - So far away, in case anyone is wondering.
combine this with a n00b guide for cron...I'm a newb at both but see how cool it'd be! Cool content all around, good sir!
i've been waiting for this for a very long time
same
The website you’re attacking won’t just set up ncat for you to attack like that though right? How do you make it work if you only have control of the attacking computer??
im pretty new to this but i assume that this is done via an exploit. Im not sure. Its been two months so correct me if im wrong
@@adryelgainza1530 Yeah I've since learned that you have to get access through an exploit before you can run the reverse shell
@@fastexpand do you use metasploit?
@@sefiyt12 I'm in the process of learning that one
So do you need to have the backdoor? If so how would you install it remotely?
If he knew that he wouldn't be making videos that explain BASICS.
He'd then have a 500k job as a security specialist.
Kody, amazing Video as always! Can't wait for the next one!
You've been a great directory ;) for basic info over the last few years. Thank you. Keep it coming!
Music:
Swedish progressive trance project: Vibrasphere
Title: Sweet September
...
no credit
you're welcome
Hello thanks i have a quetschen what u using in the window? Dell-3 what is this ?
Great, great, great. Could you kindly upload a video explaining how to generate nmap reports, import report to metasploit framework and exploit vulnerability using scripts? I know we can find videos out there but I believe you guys can do it MUCH better.
thank you. but can I save the computer connection so I can get access in the future as well? Because I want to connect to it more than once.
This nc is really really awesome to use if you have to copy some text to other devices running linux.
I mean It's like Copy-Paste over the local network, very convenient!
I think don't understand the concept. The point of this video is to show how to control a remote computer using netcat.
However, in order to make something work, at first, you need to open a port on the "remote computer" (which as hacker' you don't have access to).
Is there a way to convince the target to open a port and run the commands via a bash?
Your just awesome man .We would love if you put up a video of hacking these microsoft technician scammers and shutting down their network .It would be fun.
My question is how to start a "nc -l -p 9669 -e /bin/bash " on the server if I am not in yet.
If you’re using a Linux terminal, chances are you can chain the command... you could try piping it, but IDK if you will experience the same results with piping.
Chain with ; pipe with | . Ethical hacking only, please.
RCE would be required first.
Netcat using -l is not a reverse shell. It is a bind shell.
ok let me help you and people with the same question basically get in
@@hyperdragon1013 I cannot get an answer. Something is hanging in an endless delay. How can send an answer ?
@@CaptBoykin What is RCE ? There are abundant meanings for this. Were is the answer to my question hidden ?
what are the pros using netcat insead of ssh?
Well, in regards to transferring files over the network NC seems faster it could be my imagination but it does. Also to speed up SSH passing the -C flag will enable compression in the SSH session which does seem to speed things up slightly . I digress. Getting to the question, this is a chicken and the egg type question, in order to use NC on a remote system you would already have had to gain access to it , so to do that you would use SSH. So you wouldn't be able to use NC unless you had a shell already via SSH so therefore there are no pros because one doesn't exist without the other, no shell= no netcat. In order to use NC you would have to setup a listener (the server) and connect to the listener ( you the client). Hope that brings some clarity.
3:35 if I try to connect to the server I just get
(Unknown) [*my ip] 8888 (?) : Connection refused
I'm running it from 2 VM's on the same computer
What if you wanted to get a reverse shell but you didn't have physical access to the targeted computer?
Same question
do you have anything like getting reverse shell from Public network and Public IP
can you please make a video on how to make an headless rpi with kali so that wifi works without the need of a GUI. thx
I am very new i would love to be able to identify that a computer is compromised i don't have access to certain files despite being the administrator, i have played around downloaded comodo which at least allows me to deny processes from executing but i get lost looking threw processes, weird files, would love how to use a packet sniffer ect i really need to get a better foundation of the basics anything you recommend?
How to connect to nc session vis Windows????
You can simply ping the address for ip resolving. That's more anonymous than running nmap scan, right?
To use the nc the client system(server) must have nc install, am i right?
Please talk about C2's (command & control) and Payloads generators with build/execution time polymorphisms.
what laptop do you have? Do you use any other system?
does it still work if you dont have physical access to both computers? is it really hacking or do you show connection with netcat here?
With Quick Batch File Compiler can build an hiden .exe wit Netcat parameters same a .bat File, can use to build a small Backdoor
Hey great video !!! Very informative (: just curious, how big of a file can you transfer on LAN using netcat ?
do both of the computers have to be using kali?
why do you run nmap just to get priceline's IP address? seems a bit much. (dig, or nslookup seems to work just fine, plus you know 80/443 will be open)
I know this is 3 years old but someone please help, I'm trying to figure out a way I can do exactly this but just by using a rogue access point. In theory, if someone is connected to my rogue access point shouldn't I be able to then connect to it with netcat and get a reverse shell on them. I really just want to know more about modern attacks that are done with rogue access points.
What laptop did you use sir!
what laptop do u use?
You really hate Priceline don’t you! 😂
I called out what site you were gonna pull an ip from before you said it 😂
Amazing!
Perhaps one day you could make a video with the story behind it? Maybe call it “in the life of null byte, the shady practices of a crappy website” haha
really loving the new haircut bro
how do i get the terminal command thing?
Hello, I try to connect two of my window laptop but keep getting this error message, do you know why? Ncat: An existing connection was forcibly closed by the remote host.
Hi Bro I have a system in my network I know its IP is there a way to access the system without using a payload I want to access its drives. Please reply
Very interesting, you have some great content. Thank you.
htiguy1 thanks for watching! Tell all of your friends about us! 😃
Hi Null Byte,
I tried this but am not getting the connection establed on the listener side. it's showing " Listening on [any] 88......" after that no results. I tried adding the IP in ufw but still no luck. can help me to resolve this issue?
Sir, I have access to upload any file in C:\Windows\Temp folder of (IIS/Windows server) .Can I get reverse connection just by uploading a reverse shell ?
yes use -e
Love the cats behind u
FINALLY A GOOD TUTORIAL BY A GOOD HACKER
Is it true you turned down a guest appearance on mr. Robot?
Why did you blurr the kali linux date at the top
Does this work Over WAN?
u didnt montion the netcat -e "specifique version of netcat that can execute command" | | echo "nice work bro "
larbiboudiba boudiba
6:33
He did it to execute bash
larbiboudiba boudiba
You wrote netcat -e
So I thought that you where talking about nc -e
I don’t know evil netcat this is a new for me will check it out Thankx
You can still make a reverse shell by reading and writing to a named pipe, you can find info about how to do it in the man pages.
I thought what I'd do was I'd pretend I was one of those deaf-mutes
Thanks for the great video. The Null Byte web page seems to be down. Will it eventually be brought back online?
Love the tool and the awesome GhostInTheShell wallpaper (must have! Thx reverse pic search ;-)
can the server get a reverse shell on the client?
I love how hard you hit that mech keyboard in most videos you've made :D :)
I spilled a yerba mate tea all over my keyboard and it is extremely sticky
😁😂
but how did you get the server installed on the victims pc withou them knowing?
I am trying to get a reverse shell on a PC with nothing more than an IP address, how do i accomplish this? i have a lab setup with different internet sources etc, all i can get is an IP, how do i get a revere shell with just an IP?, I have tried NetCat and MSFvenom but have failed
why did you use port 6996?
🤓🤓no FIFO persistent backdoor? What if -e isn't available?
You would need access to the target to run netcat in the first place, so why not just execute from whatever shell you have already gained access to?
Oh, so let's say you managed to exploit a vulnerbaility and was able to perform some kind of remote code execution, you would execute a netcat reverse shell. Now you have back door available to connect to whenever you want.
Can you do this with metasplot ?
*Can somebody help me please*
I used 'XEEXE' to create payloads but after running it on another windows, through where should I listen to it. I tried meterpreter but no connection was established. I believe xeexe is something different and might require something else. How can I establish connection please help
I keep getting "protocol mismatch" when attempting to establish an SSH connection
can you demonstrate how to use from kali to windows?
Great content I love your channel very much
how can you close the listener tab without loosing the connection
you are amazing,how can i see uf is activate netcat?:/
dose it work 4mac?
Man is SMACKIN' those keys.
Like little tiny sledgehammers on every finger.
*just glad i can follow along*
Wonderful. Thank you so much.
what is reverse shell?
resource temporarily unavailable i got this error when i tried to connect to the server
Is that HOME in the background?
No, Lazerhawk - So far away
I'm lucky because I learned what recon and osint is just 2 days ago, so I'm not confused by these terms)
i wish i had the computer knowledge this guy has. where should one start?
After using nc -l 8888 my screen just freezes
Can anybody help?
it's not frozen
it's waiting for a connection to be established
Hello...I sent u a list of questions 4 days ago using Termux....can u please help me ?????
Dude... I can't even make the connection between both computers, even though I connect the client to the server-port messages won't happen as they did with you...
use a -pn the host computer may be blocking pings
@@romangrace2507 I believe it was because I can't detect wireless networks due to VM detecting connection through cable? otherwise pls elaborate. Thanks!
@@romangrace2507 Would I include it before writing the ip address? is it possible that it happens because I don't have wireless connection? vm detects wired connection.
invalid option --"e"
6:45
hey could you please give me the link to the download you used, im having a hard time trusting any links
Don't send messages while riding a horse
Hey I know this is a year old but does netcat the same as ncat. Cause I have something called ncat on my computer
It would not have hurt if a larger font size in terminal was used.