2

I have access to the command line on a Windows host. I want to trigger a download to this host purely from the command line. The catch is that I am not able to copy anything to this host prior to my use of the command line.

Using an installed instance of Internet Explorer is OK, as is using a Windows Scripting Host script or anything else that comes preinstalled on your average Windows host (let's say Windows 2003).

Thanks for any suggestions!

4

I have posted a vbscript doing a file download in this thread. Hope this fits your needs.

3

If your host allows FTP, all versions of windows come with a command line ftp clients, just run 'ftp' from a command line.

1

the TFTP client is installed by default on windows server 2003. Great for getting trojans onto compromised windows servers in one command! Which is why it's been removed in newer OSes.

tftp server1 get file.txt

The FTP client can achieve the same purpose with a little more work using a script file.

  • Including a TFTP client is a security risk, huh? I'd say the same would apply to all other TCP/IP clients included with any OS... – user1686 Aug 10 '09 at 18:32
  • used to be the way to deliver a payload via IIS exploits. One of the security hardening strategies was to remove it – Nick Kavadias Aug 11 '09 at 11:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.