Hi, and welcome back to section four Net Cat Penetration test.
In this video, we are going to talk about some net cat variants.
We saw that Net Cat is amazing, but it is a simple software.
Net Cat is a little old but wide usually today.
He was created years ago and does not have lots of updates.
And because of that some developers had to develop their own version based
on the original Net Cat.
Some modifications were added in this version and today we have some net cat
variants available to use.
We have the original Net Cat that's present in many Linux-based distribution.
We have, uh, any cat, uh,
is a software developed by any map.org project.
We are using this in our Microsoft Windows examples. Uh,
this version has base on the net original version.
And one simple difference we saw is in the last video, for example,
is about the option dash w to specify a timeout between a file
transfer, for example. This was optimization, uh,
included in this Net Cat version, we have a Crypto catt.
Crypto CATT is a net cat variant that is very close to the original,
but these deployments are integrated support for encryption.
And we have another variant, soca,
the name came from Socket Cat. Okay, uh,
is the most advanced net cat variant available. In our example here. Uh,
it's acts as a bridge to link, uh, two data channels together.
Here I'm using my KA Linux environment and we'll see some
examples using the original Net CAT version,
a crypto Cat and the Soca. First of all,
we have our version,
our original version of Netcat that is included in the,
a lot of versions in distribution of Linux.
Here we have already the, in this, in this distribution, uh,
equipped cat already started here. Uh,
you are able to see that it's very close.
The option is very close from the original one. Okay,
and we have already started the version, uh,
a version of So Cat. So the,
these three versions of Net Cat are already started in the actual
version of Linux. So this is very good, very interesting.
So our first example here,
I will start a conversation using the original
Net cat. So I use Net Cat,
I will start a server and a client and start to exchange some,
some information. So I use net cat dash v,
VV listening and specific port
will be for example, okay, 7, 5, 5, 5, 5. Okay.
And the the server is on is listen.
And here I will start a client. So I use Net Cat dash,
VV,
local host and put a specific port by 5 5 5.
Okay, so the connection is, is, is done so high.
So is the simple, uh, operation basically using here. Okay,
I'll stop this conversation and I will start
a stance of wire sharkk.
I use Wire Sharkk to get the package from this conversation.
So I'll start a look back to,
to get all the package from my local host here
and it's running.
Let's return for our example here.
I will start a server like this and I'll start a client
and I will start to put some information here, like a chat. So,
hello, I
good and bye.
Okay,
and here we have all the communication between
these two instance the server and the client.
So we saw that the protocol they used by the full net cat used D C P.
And we have, uh, initial, uh, handshake.
So we have a sync sync egg in a egg.
That's is a handshake to start a connection, okay,
to start a conversation. Okay?
And we have some information here.
And Net Cat don't use any type of encryption. So we have for example,
all the information here, passing from one side to another.
So we have a push act for example,
to push information like this by,
by all the information that was traffic, traffic here.
And in the, we have the stop of the communication hack,
FINAC Finac. This represent end of the connection.
So all the, the text here was in clear text.
So was able to,
to anyone that are sniffing the network is
able to get this, this information, information.
Now let me stop here
and use the same example,
but now using Crypto Cat.
So here we use the same, uh, structure,
but we use cat,
crypto Cat, okay, here
and here will be the same. We use the same
ripped cat. I'll, uh, restart
the, the sniffing by using, uh, wire chart.
Let me start again, continue without saving. Okay, that cat is uh,
wire sh is is ready and we'll start the same,
the same operation. I will start in, in this site here,
a server and another site here client.
So Crypto Cat is listen now the client
is connected and let's start a shot. I, hi. Hello,
nice to talk with you. You okay?
Hi. Okay, so we stopped the,
the conversation and let's return to Wire Shark.
So in Wire Shark, we have the same,
the same operations, the same structure. Here we to start a connection,
we have a handshake scene, syn, egg and scene.
And we start to talk to exchange formation.
So look that now we have the same structure here per egg. That's mean that, uh,
some information was sent to 1.1 to another one,
but now all the text that we send was encrypted.
Okay? So this is the base difference between uh,
regional net cat version and the crypto cat version.
So this is very interesting. It's more, is more safety use net
in this, uh, scenario, for example, all the information is
encrypted. Okay? Now let's take a look in.
So Cat to stop here
and return for the sense of criminal.
Clear and clear. Okay,
so we saw that Net CAT is a advanced version of variants
of uh, net cat. And he has, uh,
use options to use and he works
in a kind of channels to connect with some
channels, with some, some sites. So Net Soca,
it's here. We have the original version here of Net Cat,
the time original version of, of, uh, net Cat.
We have the option of
to show some information dash H.
So look that we have the basic information
here, like use it in in net Cat on other variants here,
okay? We have some options that are present in both version,
the original and this versions here.
But we start to have more informations, okay? More,
uh, options to use. For example, working pipes,
a specification to use more detailed. For example,
some structures here, some interfaces,
some abstract operations, more specific, uh,
operations use IP four and IP six for example.
So we have a lot of, uh, detailed information. You use, uh,
open Ss s l for example,
to work in certificate of security encryption.
So we have huge informations
available here in this variant Soca, okay?
I use to see this information I use,
let me maximize this, I use this, this option here,
dash H Okay, this is better,
but there's another option to show all the options available here.
And this option is so dash question mark,
question mark, question mark. Okay, so we have huge list here.
Let me return to, to beginning was,
okay here,
question marks three times question marks.
We have the original list that we saw before, okay?
In the dash H option.
And we start to get more details and,
uh, specialist options from many,
many cases when we are use socket, for example.
So they are a huge list and
uh,
it's very interesting to give more deep in this information if you have
a connection
in some details that depend off, off some cases. Okay?
Let me return for the original format here.
Good. So let's start our, our test here.
The instance of wire shark is, is already listened, sniffing all the,
the package and the structure will be the same. We'll start a server,
then we'll start a client. So in this side here I will,
I will use Soca. I have to specify the protocol.
T C P is TCP dash lesson.
So this mean that I'll use the local host, uh, and this distance here of,
so we are running as a server. So we'll start to listen.
So D C P I will, using the T C P protocol,
I have to specify a port by five in this case.
And I have to specify as standard
in that's mean that they, I have to specify a channel because,
so use this model of communication. We have to specify channels.
They are connection used channels. So I have to use
this keyword here. So in this case,
let me repeat, but using dash V
to get more information during the communication.
And now I will start a client. So I, I use the, uh,
similar structure. So I have to specify the protocol.
T c p, the local host
to specify the host in this case will be local host.
And specify the door, the five, five part five,
and specify the channel.
So the connection is established.
Now we have a handshake here, okay? In,
in, in using, uh, the R chart. So the handshake is okay,
the connection, it's okay between these two instance,
let's start some communication. Say hi. Hello,
welcome.
Okay, because I use the V option, we have more details. So the time
we have, they receive it and the data, what's received it and sent it.
For example.
So we have this repetition here 'cause we are logging all the information.
And in one shark we have the head,
the handshake and the information.
So the information is in clear text, okay?
But we have some advanced options.
So this is the result of the variants.
So each variant got the initial version of
Net CAT and put more, uh, features, for example,
maybe features about security and encryption options,
uh, and features for a specific, uh, domain. For example,
in this case for stock at communication, all the options that we have in socket.
So this was the variant that we saw here.
We have many others
present and developed for the developers to, uh, satisfy some specific domain,
for example, or to get more, uh,
robust version of the original net CAT version. In this video,
we saw some net CAT variants available to the two. Use the next section.
We'll take a look in more operations with files. I hope to see.