netcatLOLBIN
Listener y navaja de red; recibe las reverse shells.
Binario legítimo del sistema (LOLBIN): no es una herramienta ofensiva, pero un atacante lo aprovecha porque suele estar ya instalado y levantar menos sospechas que subir una herramienta propia.
Netcat, la navaja de red: abre y escucha conexiones TCP/UDP crudas. En pentesting se usa sobre todo como listener para recibir reverse shells, pero también para transferir ficheros, hablar con servicios a mano y confirmar SSRF viendo la petición cruda entrante.
Familia Acceso, shells y transferencia
Flags -lvnp -e
Conceptos OS Command Injection
Cheatsheet Reverse shells
Instalación
sudo apt install -y netcat-traditionalComandos útiles
Aparece en
Algunas máquinas donde se documenta su uso; no es una lista exhaustiva.
- ArcticHackTheBox
- AstronautProving Grounds Practice
- AuthByProving Grounds Practice
- BackdoorHackTheBox
- BastardHackTheBox
- BigPivotingDockerLabs
- BillybossProving Grounds Practice
- BlueHackTheBox
- BoardLightHackTheBox
- BountyHackTheBox
- BratarinaProving Grounds Practice
- ChatterboxHackTheBox
- ChemistryHackTheBox
- ClamAVProving Grounds Practice
- ClueProving Grounds Practice
- CompiledHackTheBox
- CraftProving Grounds Practice
- CraftyHackTheBox
- Darkhole 2VulnHub
- DC-1VulnHub
- DevelHackTheBox
- DockerlabsDockerLabs
- DomainDockerLabs
- EvilCupsHackTheBox
- ExfiltratedProving Grounds Practice
- ExtplorerProving Grounds Practice
- FiredProving Grounds Practice
- FishProving Grounds Practice
- FluProving Grounds Practice
- GrandpaHackTheBox
- GrannyHackTheBox
- GreenHornHackTheBox
- Hacker Kid 1.0.1VulnHub
- HeadlessHackTheBox
- HetemitProving Grounds Practice
- KevinProving Grounds Practice
- LaVitaProving Grounds Practice
- LegacyHackTheBox
- LevramProving Grounds Practice
- MailingHackTheBox
- NagoyaProving Grounds Practice
- NibblesProving Grounds Practice
- OpenSourceHackTheBox
- OptimumHackTheBox
- PayDayProving Grounds Practice
- PebblesProving Grounds Practice
- PelicanProving Grounds Practice
- PermXHackTheBox
- PostfishProving Grounds Practice
- QuackerJackProving Grounds Practice
- SeaHackTheBox
- ServmonHackTheBox
- SickOs 1.2VulnHub
- SightlessHackTheBox
- SquidProving Grounds Practice
- SwagShopHackTheBox
- TrickHackTheBox
- VmdakProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WallaProving Grounds Practice
- WomboProving Grounds Practice
- ZabProving Grounds Practice
- ZenPhotoProving Grounds Practice