Security Basics mailing list archives

Re: How does one connect to a shell (cmd.exe) bound to a port on a remote machine?


From: Byron Sonne <blsonne () rogers com>
Date: Fri, 07 Nov 2003 15:42:32 -0500

I've been looking at some perl scripts that purport to create cmd.exe shells
bound to a tcp port on a remote machine.  I'm curious, how would someone connect
to these shells?  The code looks very compact, I wouldn't imagine you could just
http to the port bound with cmd.exe?  Perhaps telnet?  Is this how Code Red and
Nimda were operating?

Ah, that would be (well, one way at least) using the network swiss army knife 'netcat': http://freshmeat.net/projects/netcat/?topic_id=150

Handy thing to add to your arsenal.

--

        For good, return good. For evil, return justice.


---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to simplify the management and deployment of PGP and reduce overall PGP costs by up to 80%. FREE WHITEPAPER & 30 Day Trial - http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 ----------------------------------------------------------------------------


Current thread: