In this video,
you'll learn how to use Netcat to implement persistence on a compromise system.
I hope you're excited as me. So let's dive on in.
To get started setting up a persistent backdoor using netcat,
we simply need to upload the Netcat Dotc file from Carli
Lenox to the systems three two folder within the root
directory of the target system. With our target system,
if we type cifo,
we can see it is the meta exploitable tree windows virtual machine.
We can simply use this command,
which is specifying to upload and ctc,
which is a net cut executable from Carli Lenox to the
system T two folder within the Windows victim system.
Simply type the command, hit enter,
and after a few seconds you will see it is being uploaded to the victim
system.
Next to get net cut to automatically run whenever the victim
system reboots, we need to use a following command.
This will simply make a modification within the registry of the Windows
victim system. Next,
we want to specify to execute netcat using the Windows
command prompt, but run on port 1, 1 1 1.
So therefore we'll use this command like Sue. And lastly,
let's ensure that Netcat executes when the system reboots
great. At this point,
the registry information is configured on the victim system. Next,
the last thing we need to do is simply open port
1, 1 1, 1 on the victim system's firewall.
So now let's create an interactive shell between the victim system and
our machine.
We'll use execute dash F C M D and I for
interactive.
Currently we have an interactive command prompt on our Carly
virtual machine. Next,
let's determine the firewall status on the victim machine.
We can simply type net H firewalls, show up mode like so,
and we can see the operational state of the firewall is disabled in a real
environment. The operational mode will be enable.
So let's assume the operational mode of the firewall is enable
to open a port to speed specific to open port 1 1 11.
We can simply use the following command like so and presenter.
Once everything executes properly, we'll get an okay response.
Lastly, we can verify that our port is open by using this command.
Let's type exit. So now we have returned to our material.
Shell,
let's type reboot to reboot the metal exploitable tree windows
virtual machine.
Let's type reboot one more time and it seems as though the command is not
working. Let's do it manually. Let's log in like,
so
let's click on start and now let's click on restart,
select any option and click. Okay. Great.
While that system is rebooting, I'm simply going to open a new terminal
like so
This time I'm gonna connect using the Netcat client to connect a Netcat listener
on the compromise system.
I'll type NC followed by dash V,
the IP address of the victim system under destination port of one
11.
And currently we are seeing the connection is refused.
Let's logged into the victim system
and let's try it one more time. Uh, great. So what we have learned so far,
for the net cut server run, a user must be logged into the victim system.
Even though the victim system has rebooted,
it doesn't mean to say that Netcat server is actually running.
So until someone logs into the victim system,
then we are able to actually connect from our Carli machine to a Netcat
server on the victim system. If I type, who am I,
I'm currently running as the administrator account create.
In this video,
you have learned how to use net card to set up a systems on a compromise system.
In the next video, you'll learn how to perform pivoting using Metasploit.
I hope this video has been informative for you and thank you for viewing.