Netcat in windows

Just had a nightmare finding a binary for windows that wasn’t cygwinized… eventually found it here

http://www.hackosis.com/wp-content/uploads/2007/12/nc111nt.zip

[update]

Jon Craton has mirrored this file in case the other link goes down

http://joncraton.org/files/nc111nt.zip

(Cheers :)

[update 2]

It seems that antivirus programs mark netcat as a threat when actually it is just a useful tool - see conversation and links in comments for details.

Tags:

10 Responses to “Netcat in windows”

  1. Dave Says:

    Thanks mate, saved me a whole lot of looking, I was just starting to despair :-)

  2. Jon Craton Says:

    I had a hard time finding this file myself. Thanks for the link. I found this blog via Google. :)

    I have mirrored the file on my site in case that link goes down in the future.

    http://joncraton.org/files/nc111nt.zip

  3. Shane Says:

    It won’t go down. :p

  4. Abel Cheung Says:

    But the real origin of netcat win32 port, http://www.vulnwatch.org/netcat/, is indeed down for (at least) days. It even disappeared completely from google cache. So your copy may be more valuable now :)

  5. Madman Says:

    Too bad these links no longer work. Only downloads 65,536 bytes and ZIP complains of missing signature and cannot open it.

  6. Valamer Kutayami Says:

    Thank you very much, I had a very hard time tracking down this little tool a week or so ago, I did end up finding it but then someone deleted it on me and I couldn’t remember where I got it from last time.
    Your just saved me a lot of time searching all over again :)

  7. stu Says:

    @Madman: I just tried redownloading the first link and it seems to work ok.

  8. tpierron Says:

    Hey guys, it is me or all the archives you linked contain a virus-infected executable in it ? Kapersky, Norton and AVG all complain that it is infected by RemoteAdmin.Win32.NetCat

    I recompiled the source with MinGW and no more complain …

    Maybe a false positive, since I didn’t see any port in the listening state opened while running the command, but still I wonder if you can have a similar warning if you compile the source with VC.

  9. stu Says:

    @tpierron: If you read the description here http://research.sunbelt-software.com/threatdisplay.aspx?name=RemoteAdmin.Win32.NetCat&threatid=47713 it appears that netcat itself is flagged in the enterprise versions as it’s not something that “normal” users would be running on a business network. They probably flag other networking tools too.

  10. stu Says:

    Here are some more details

    http://66.102.9.104/search?q=cache:wIIgDd8B6xQJ:packetstormsecurity.org/papers/virus/Taking_Back_Netcat.pdf+netcat+marked+by+virus+checker&hl=en&ct=clnk&cd=3&gl=uk&client=firefox-a

Leave a Reply