Netcat — Swiss Army Knife GuideStep-by-step reference: install & use Netcat for port checks, banners, chat, file transfer, shells (lab only). Educational purposes only.FAQ

What is Netcat?

Netcat (nc) is a small command-line tool that reads and writes raw data over TCP or UDP. Think of it as a telephone for computers: one side listens, the other dials in, and anything typed appears on the other screen. Admins use it to test services and move files; attackers abuse it for remote shells.

Is Netcat illegal?

No. Netcat itself is a legitimate open-source networking tool. Using it on computers or networks you do not own or lack written permission to test — especially opening remote shells — is illegal. Only use it on your own lab machines or in an authorized engagement.

What do the -l, -v, -n and -p flags do?

-l means listen (wait for a connection), -p picks the port to listen on, -v means verbose (show what is happening), and -n skips DNS lookups so connections resolve faster. A typical listener is nc -lvnp 1234.

What does -z do?

-z is scan mode: connect and report, without sending data. Combined with -v, nc -zv target 20-80 tells you which ports in that range accept connections. It is a quick port check, not a full scanner like Nmap.

How does the chat work?

One computer runs nc -lvnp 1234 to listen. A second computer runs nc <first-computer-address> 1234 to connect. From then on, anything either side types appears live on the other screen — a raw two-way pipe with no app needed.

Why does -e sometimes not work?

The -e flag (run a program like /bin/bash on connect) is the famous remote-shell option, but many modern Netcat builds remove it for safety — including netcat-openbsd on Debian/Ubuntu. Defenders also watch for exactly this pattern, so treat it as lab-only knowledge.

How do I see if something suspicious is listening?

Run ss -tulpn on Linux. It lists every listening TCP/UDP port and the program behind it. Anything you do not recognize deserves investigation — close what you do not need and firewall the rest.

How do I defend against Netcat abuse?

Close unused ports, check listeners with ss -tulpn, allow only known ports through a firewall like ufw, log outbound connections, and run an intrusion detection system like Snort or Suricata that flags reverse-shell patterns.

All tools · Sitemap · Games