SANS Penetration Testing: Category - Backdoor

Netcat without -e? No Problem!

by Ed Skoudis Many pen testers know how to create a reverse backdoor shell with Netcat. But, what do you do if you have a Netcat that doesn't support the -e or -c options to run a shell? And, what if your target doesn't support /dev/tcp? In this article, I'll show you a nifty little … Continue reading Netcat without -e? No Problem!

Tips for Evading Anti-Virus During Pen Testing

By Mark Baggett, the SANS Institute You know the old saying'' "Give a man a backdoor undetected by antivirus and he pwns for a day. Teach a man to make backdoors undetected by antivirus and you will get free drinks for life at DEF CON." During the exploitation phase of a pen test or ethical … Continue reading Tips for Evading Anti-Virus During Pen Testing