🧰 Netcat

The items that name it 7

• AI-Powered Espionage Campaign Targets Government Linux Infrastructure
  article2026-10-15

  Used for named-pipe reverse shells and to send compressed database dumps to C2

• Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
  writeup2026-09-09

  used by UAT-11823 to establish a reverse shell to C2 server; also referenced in UAT-12197/UAT-11823 activity

• Financially Motivated Threat Actor BREEZE COMET Targets Brazil
  article2026-09-01

  Downloaded after rogue device foothold to pull post-exploitation frameworks from external open directories

• GH05TCREW/pentestagent
  repo2026-05-08

  Networking utility included in the base Docker image

• Analysis of Python's .pth files as a persistence mechanism
  writeup2025-01-14It is written here as Netcat (nc).

  Used as a bind shell payload (listening on port 45555) delivered via the malicious .pth file in the author's exploitation demo.

• Shell Script Compiler (shc)
  writeup2024-12-11

  Used to create a bind shell (shc_ncat) for testing shc's obfuscation and anti-debugging behavior

• Bypassing Chrome's URL restrictions
  writeup2021-03-07

  Used to host a fake FTP server to demonstrate exfiltration of HTML data via FTP scheme