when using the python server specify the address exactly or default which is all adresses 0.0.0.0

difference EXEC xp_cmdshell and just xp_cmdshell? if you use the EXEC xp_cmdshell option use ” around the command after the statement

When using netcat DONT FORGET THE -e cmd.exe OPTION without it you will just get a data stream

also there are different versions of netcat get the one from nmap it’s better and has the -e option