NetCat Shell

Thanks For Downloading!

Review the documentation below and follow any custom installation steps. If no install steps are listed, most Splunk Apps and Add-ons can be installed as follows:

Windows: Decompress the downloaded file using a tool like 7-Zip and place the resulting folder into %PROGRAMFILES%\Splunk\etc\apps. Then restart Splunk using the splunk restart command or the GUI.

Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.

Spawn a netcat listener piped to a shell. To connect, simply launch, from another machine, nc <splunk server> 5555 in one window and nc <splunk server> 6666 in another window. Type UNIX commands in the first window and view the output in the second window. WARNING!!! WARNING!!! WARNING!!!! THIS APP IS DANGEROUS AND TO ONLY BE USED IN A CLOSED ENVIRONMENT FOR EXPERIMENTATION PURPOSES!!!! YOUR SERVER *WILL* BE COMPROMISED FROM OUTSIDERS IF YOU LEAVE NETCAT RUNNING OR OTHERWISE ACCESSIBLE BY THE INTERNET!!! YOU HAVE BEEN WARNED!!!! SIMPLY DISABLING THIS APP IN SPLUNK WILL *NOT* KILL THE LISTENERS. YOU WILL NEED TO MANUALLY KILL THE NETCAT LISTENERS FROM THE UNIX COMMAND LINE.

This app was originally created as a proof-of-concept work.