nc -h command on netcat-0.7.1 does not show -e option

cbider · 08-12-2013, 03:29 AM

I downloaded and installed netcat-0.7.1 and when I use nc -h command to view the options I dont see the -e option as recommended in the book Netcat Power Tools. Has this option been deprecated for maybe being dangerous or unnecessary?

druuna · 08-12-2013, 03:40 AM

The -e option is considered a security risk and not present by default.

Have a look at this:

Quote:

If netcat is compiled with -DGAPING_SECURITY_HOLE, the -e argument specifies
a program to exec after making or receiving a successful connection. In the
listening mode, this works similarly to "inetd" but only for a single instance.
Use with GREAT CARE. This piece of the code is normally not enabled; if you
know what you're doing, have fun. This hack also works in UDP mode. Note that
you can only supply -e with the name of the program, but no arguments. If you
want to launch something with an argument list, write a two-line wrapper script
or just use inetd like always.

Quote comes from this site: Netcat: the TCP/IP swiss army