nc

Linux execution T1059.004

Netcat — the TCP/IP Swiss army knife. Used for port scanning, reverse shells, file transfers, and network pivoting.

Binary Paths

  • /bin/nc
  • /usr/bin/nc
  • /bin/netcat
  • /usr/bin/ncat

Glob Patterns

Pattern Notes
n?
Single char wildcard — may match other n? binaries; use full path for precision
n[c]
Character class on second char
/bin/n?
Full path narrows match to /bin/nc
/???/bin/nc
Obfuscate /usr/ prefix
/bin/n[c]
Full path with bracket class
net?at
Matches netcat with wildcard replacing 'c'
nc*
Star suffix — matches nc, ncat, ncftp etc.
n[c]*
Bracket then star for ncat, ncat6 variants

Pattern Tester

$

Try typing nc or a full path like /bin/nc

YARA Rule

Auto-generated detection rule for nc

      

Resources

← Previous mshta Catalog Next → nmap