2

I have access to the command line on a Windows host. I want to trigger a download to this host purely from the command line. The catch is that I am not able to copy anything to this host prior to my use of the command line.

Using an installed instance of Internet Explorer is OK, as is using a Windows Scripting Host script or anything else that comes preinstalled on your average Windows host (let's say Windows 2003).

Thanks for any suggestions!

David Resnick
  • 195
  • 3
  • 12

3 Answers3

4

I have posted a vbscript doing a file download in this thread. Hope this fits your needs.

Community
  • 1
Maxwell
  • 5,026
  • 1
  • 25
  • 31
3

If your host allows FTP, all versions of windows come with a command line ftp clients, just run 'ftp' from a command line.

semi
  • 726
  • 3
  • 7
  • 15
1

the TFTP client is installed by default on windows server 2003. Great for getting trojans onto compromised windows servers in one command! Which is why it's been removed in newer OSes. 

tftp server1 get file.txt

The FTP client can achieve the same purpose with a little more work using a script file.

Nick Kavadias
  • 10,758
  • 7
  • 36
  • 47
  • Including a TFTP client is a security risk, huh? I'd say the same would apply to all other TCP/IP clients included with any OS... – user1686 Aug 10 '09 at 18:32
  • used to be *the* way to deliver a payload via IIS exploits. One of the security _hardening_ strategies was to remove it – Nick Kavadias Aug 11 '09 at 11:35