Computer System Security Lab 3 Netcat

Exercise 1, Download and install netcat: You can download netcat for Linux and Windows from http://netcat.sourceforge.net/ (or ftp to 10.140.200.1 in the Seclab) and install. Read all readme files. NOTE: In each of the exercises you will find it useful to use Wireshark to monitor the packets that are generated. Exercise 2, Basics- File transfer: From your Linux virtual machine setup an instance of netcat to send a file to whomever connects to it. On your Windows virtual machine start an instance of netcat to connect to your Linux virtual machine to retrieve the file. What did the transfer packets look like? Exercise 3, Basics- Remote Command Prompt: On your Linux virtual machine setup an instance of netcat to wait for a connection from your Windows virtual machine and then provide a command shell to the user. Demonstrate to your lab instructor. Lab Instructors Verification ______________________________________ Exercise 4, Adept- Bounce: In this exercise you will use your Linux virtual machine from exercise 2 to accept a connection to a command prompt. This time though you will be configuring a Linux virtual machine to act as a bouncer or relay between your Windows beginning point and the Linux target using netcat and a named pipe. Demonstrate to your lab instructor. Lab Instructors Verification ______________________________________ Exercise 5, Download and install cryptcat: You can download cryptcat for Linux from http://sourceforge.net/projects/cryptcat/ and install. Read all readme files. Redo Exercise 2 and verify using Wireshark that the transmission is indeed encrypted. Demonstrate to your lab instructor. Lab Instructors Verification ______________________________________

VNSA580/780

-1

D G Johnson

Exercise 6, Download and install socat: Socat is a general purpose, bi-directional data stream connector. Or in other words a very versatile two-way relay. You can download socat for Linux from http://www.dest-unreach.org/socat/ or ftp from 10.140.200.1 and install. Read all readme, example and manual files. Redo Exercise 4 using socat as the bouncer. Demonstrate to your lab instructor. Lab Instructors Verification ______________________________________ Exercise 7, Novel and unusual use of netcat: Demonstrate a novel or unusual application of netcat, cryptcat or socat to your lab instructor. This use should not be one shown or suggested in the tools documentation. You may use any programming or scripting language you wish. Include your program/script in your write-up. Lab Instructors Verification ______________________________________

Write Up:
The only write up for this lab is to document your novel or unusual use of netcat, cryptcat or socat (i.e. something that is not already suggested in the documentation). Include any scripts you wrote. Write-ups must be submitted to the MyCourses drop virtual machine for lab3 as a PDF. Write-ups should not include raw data except as to support your conclusions. No paper submissions accepted.

VNSA580/780

-2

D G Johnson