search

BlackArch / blackarch-iso

BlackArch Linux ISOs
https://www.blackarch.org/
207 stars 80 forks source link

Update packages to inlcude the openbsd-netcat #37

Closed 10ambear closed 2 years ago

10ambear commented 2 years ago

Hi there :)

Apologies I couldn't connect to the IRC channel to chat about this (might be my work vpn), but I had some troubles with the GNU netcat especially around the try hack me boxes. On some occasions the listen didn't even work when trying to connect to a reverse shell, I also found this during work (I work as a security consultant just for context). I looked into it and the general consensus is that the openbsd-netcat is superior to the GNU netcat due to the myriad of support and frequent updates to the openbsd-netcat compared to the GNU netcat. I've been using it for the last 2 months without issues, it just seems a lot more stable. Would it be possible to replace it for the slim iso? If so would just editing the package file do it (sorry I'm a bit new to linux and pen testing in general)? Let me know!

noraj commented 2 years ago

Both gnu-netcat and openbsd-netcat are not packaged by blackarch but by archlinux, they both provides netcat. If AL team choose the default netcat package should be the gnu one if maybe because AL is GNU/Linux distribution and not a BSD one.

Anyway for your pentesting I strongly suggest you to use ncat that is packaged under the nmap package on AL.

If you want to try more fancy stuff try pwncat and pwncat-caleb.

Happy hacking

noraj commented 2 years ago

PS : ncat is included in the ISO already.

10ambear commented 2 years ago

Thanks for the explanation. Is it even worth keeping the original netcat as part of the iso since it’s not really good or is it going to be pulled in with arch automatically? I’d definitely like to help maintain blackArch I love using it :)