Now it's time to talk about the night, Kat.
Night.
Kat is one of the original network penetration testing tools and as they call it, Swiss Army Knife.
So this utility reads Android data across network connection using TCB or UDP protocols.
Now first, let's have a look inside it.
So here and the terminal man and see as you can see, it is a Swiss Army knife.
A simple Unix utility which reads write data across networks.
Now first try connect to somewhere else.
So sudo system city to check the status of the apache.
You can see that apache is still up and running.
So n c dash and v now n stands for disabled DNS resolution and v stands for for more verbose.
Now actually you can read more about it from the manual page.
I got these from there and then got the IP address, then the port number, the IP address, it will
be the local IP address, by the way, as you can see here, or if you want, by the way, this is for
the loop or the local host, you can get the IP address by using the IGF config.
Okay.
So here it is, our IP address as you can see now and see dash end V, but the IP address, but the
port, which is 80, this is the responsible for Apache.
How did I know that?
By using.
Yes, you are right.
Net stat dash and TLP command.
As we learned previously.
As you can see, the port is opened now again and see Dash and V, but the IP address, both the port
number and if you can see when I try it, you can see it is open and we can put command and put whatever
we want.
But by the way, this behavior is unexpected because we are sending a bad request, by the way, about
the request to the Web or to the index, the HTML that we saw.
Or the main page of the web browser.
So this doesn't make sense, by the way, but I'm just showing you how to use the NC OC.
Now we can use and see with Telnet and see with the top three responsible for the email for an MP.
A simple network management protocol and a lot of other ports and protocols.
Now let's clear the screen.
And I want to open a new terminal.
Like this.
So here we have on the left and we have on the right.
Now we're on the right.
And here on the left.
So on the left, we want to use this time to open to listening on a TV or you'd be bored.
So I will use Dash and the LP OC now and as we learned previously to disable DNS Resolution V, which
means DNS resolution.
So you will not search for the IP or the domain name.
You just get the IP and put it as is V for verbose or to to get more output and for listening and P
for for the port number.
So I will put the port number and I will bought 9999 OC now press enter as you can see we are listening
on any as you can see which means any IP address and we are listening on port nine nine, nine nine
now here on the right and see what the IP address as we learned previously and both the port number
now if I press enter you can see that yeah we have a connection here.
All right, so if I type ls, it will be there.
But you can see it is not just a command.
It is just like a chat.
So.
Hi there.
Who are you?
For example?
You can see that it is receiving.
Here I am, no one.
Whatever.
Okay.
As you can see, we are using it as we are using a chat now and see can be used to transfer files.
But actually it is a bad practice.
I will not handle it here in this course because it is a bad practice, by the way, to use and see
because it is an encrypted protocol or an encrypted connection, let's say.
So I will not handle that here.
You can read more about it.
We will use that direction and as simple as that.
Now the most important feature of the ANC or the usage of ANC for us, the TE, the red team, the attackers,
which is opening a reverse shin ock.
Now please don't get confused.
Now attackers are mean that we are the red team that detecting weakness in the system.
Not to damage the system or harm any system or whatever.
So here on the left, let's imagine this is the attacker machine.
And on the right, this is the victim machine.
So in the left, in the attacker, we will use this command and see Dash and the LP as we learned previously.
So here we are, the attacker.
We are listening and waiting until the victim sent the request to us.
Okay.
On the right here, the victim machine, we will use the see, but the IP address of our machine OC,
which is our attacker machine and what the board that you are listening to as you can see.
But we will use the dash e option, which means execute a shell or execute a command or execute a utility.
And that utility will be the bash bin bash.
So I am executing a bin bash on my machine and I am sending that to the attacker machine.
So on the victim machine we are executing Bash Shell as you can see.
And on the attacker here we can use ls you can see.
Yeah, we are seeing everything here.
Okay.
So you can see that.
Alice, this is Alice inside the victim machine.
Not inside our machine.
Okay.
If I type Dutch text, twist the text, for example, and as again, you can see that it should be here
by the way, because I'm using test, we already have it here, by the way.
You can see that the arrows and whatever are not working.
As you can see this command here we received not found because this is not a sophisticated shell like
the terminal.
This is just a simple bin.
BASH So touch not the text, for example.
Else you can see that here it is not the text.
Okay.
And well, this is the just the basics.
Now, by moving forward with this course, we will learn the techniques, the tools, how to let the
victim to open such a shell by executing shell command, by visiting websites or whatever.
Okay, don't worry.
This is just the basics.
But keep that in your mind.
How to open a reverse shell on the victim's machine by executing Bash bin bash.
And we are while we are listening on that specific connection with port number.