Today, we will talk about CAP and how we can use it for our penetration testing purposes.
Netscape is hacker Swiss Army Knife.
It's a very powerful tool and it has been used for testing and hacking for many years.
One of the features that Netscape can offer is SportsCenter, which it will help us to check if a certain
port is open or not.
Let's see how we can do that.
Let's type and see in our command line, followed by the dash and the argument, then the target IP
address and finally the port we want to scan.
From the result, we can see the port 80 of the Apache two is open.
We can also use Netcare to listen on a certain port and then we can establish a connection on that port
from a different operating system.
Let's use Ngarkat has a server on our colonics.
We don't listen to one to one port, four four four four.
The dash an option is to disable DNS name resolution, the dash URL to create a listener, the dashboard
is to add some verbosity to our output and finally, the dash is to specify a list.
Newport now our Nic cat is listening on PT. four four four four and waiting for incoming connection.
Let's open another terminal window and connect to it.
Now, let's use this as a chat server and exchange some messages.
We can also use Netcare to send and receive files, we will use our colonics as a server and we will
try to send a file to it using maquilas.
We are using out with redirection here to save the received file.
From the Mako's terminal, we will send the file using input redirection with the list than sign.
Nice, we were able to transfer to set up that file to our meetings, let's verify that by checking
the file size on our Kelly.
It looks good.
Now let's take a look at one of the most interesting features of Ngarkat, and it's called remote administration.
Netcare has the ability to redirect commands using the Dashty option, which it will execute a certain
program after a successful connection with our target.
Let's take an example.
We will use Nic, Catherine Arkley, Alison and PT. four four four four, and then we will use the dashi
option to execute the bin based upon successful connection.
Now, up from our Mako's, we will connect to our Nick at the same way we did before.
Let's try to execute some commands now, like who am I or I have config.
Nice, it looks like we, again, remote access to our Kelly using Ngarkat.
Keep in mind that not whole operating system that come loaded with medical support, the Dashty option
depends on how the cath was compiled in the first place.
And most cases, we won't be able to accomplish this example since the target might be behind net or
network address translation.
Or it could be also protected with a firewall that blocks all incoming connections to a certain port.
But we can still initiate connection from our target straight to us through Ngarkat.
And that's called reverse cell connection, which usually firewalls do not block outgoing traffic to.
Depends on how you configured your firewall in the first place.
Let's try now to use Netcare to listen for incoming connections on our Mac OS as the attacker operating
system and then send reverse Shell connection from our Kelli.
Now we switch to our calculators and send a reverse shell to the maquilas.
Let's try who am I again, I can pick.
Nice.
Looks like we were able to send your version.
We have reached the end of this lesson.
Thank you.
And soon the next one.