News for hackers. Stuff that matters.

A comment on Exfiltrating files with BusyBox. Parent comment

Re:Exfiltrating files with BusyBox by schoen on Monday October 03, 2016 @05:44PM (#12631595)
Indeed, the tools listing in that post makes clear that nc should be available. If you have another Unix machine elsewhere, the nc solution avoids having to install any new software on either machine.
[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:03PM (#12631745)
Indeed! I meant to mention the nc option, but I've found that ftpput/get are more often available than nc, perhaps something to do with the ubiquity of ftp.
[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by netsec_burn on Monday October 03, 2016 @06:19PM (#12631831)
Much the other way around. Netcat is ubiquitous. I haven't come across many systems with ftpput and ftpget.

Neat challenge left as an exercise to the reader: whois can be used to transfer files too. :)

[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:30PM (#12631909)
Interesting, we must be looking at a different class of devices. If we're going down that road, there's always base64 and copy + paste!
[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by na85 on Monday October 03, 2016 @06:30PM (#12631912)
>whois can be used to transfer files too.

Ah, the old DNS-tunnelling trick. A fun way to flip cheap hotels the bird.

[ Parent | on HN ]