Conversation
The injected .sh script now downloads correctly.
Changed to --data-binary upload from target
|
Ok, I will check it out @Talismancer, thank you. I generally try to add features that are fully functional (sibling servers as well). Let me see how you approached this and maybe we can co-author the complete solution, I'll get back to you. |
|
I added a new port (in start_receiver_server() ) to receive the file with a threaded FileReceiverHandler to handle incoming files. A new global ticket variable that can be seen by the new thread is used to compare to the ticket on the incoming file. The injected scripts send headers that include the path that the handler uses to place the file in the correct location. |
Added a secure "download" command for injection into Linux (.sh) & Windows (.ps1) to download files from the target machine to the C2 hub (but not siblings at this stage).
Sample Download command:
download .\winpeas.bat /home/kali/winpeas.bat