News for hackers. Stuff that matters.

A comment on Exfiltrating files with BusyBox. Parent comment

Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:03PM (#12631745)
Indeed! I meant to mention the nc option, but I've found that ftpput/get are more often available than nc, perhaps something to do with the ubiquity of ftp.
[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by netsec_burn on Monday October 03, 2016 @06:19PM (#12631831)
Much the other way around. Netcat is ubiquitous. I haven't come across many systems with ftpput and ftpget.

Neat challenge left as an exercise to the reader: whois can be used to transfer files too. :)

[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by bitquark on Monday October 03, 2016 @06:30PM (#12631909)
Interesting, we must be looking at a different class of devices. If we're going down that road, there's always base64 and copy + paste!
[ Parent | on HN ]
Re:Exfiltrating files with BusyBox by na85 on Monday October 03, 2016 @06:30PM (#12631912)
>whois can be used to transfer files too.

Ah, the old DNS-tunnelling trick. A fun way to flip cheap hotels the bird.

[ Parent | on HN ]