bitquark
Re:Exfiltrating files with BusyBox
on Monday October 03, 2016 @08:22PM (#12632464)
The point of the post was to show how easy it is, as people seem to miss these commands or may not be aware of how easy it is to set up a listening service. It's exfiltration by definition, but you are of course free to mangle the data any way you want or use DNS techniques if you really care about hiding what you're doing, but that's a different post.
Re:Exfiltrating files with BusyBox
on Monday October 03, 2016 @06:36PM (#12631939)
Agreed, I've clarified why I went with ftp and added a note with example usage of nc, thanks!
Re:Exfiltrating files with BusyBox
on Monday October 03, 2016 @06:30PM (#12631909)
Interesting, we must be looking at a different class of devices. If we're going down that road, there's always base64 and copy + paste!
Re:Exfiltrating files with BusyBox
on Monday October 03, 2016 @06:03PM (#12631745)
Indeed! I meant to mention the nc option, but I've found that ftpput/get are more often available than nc, perhaps something to do with the ubiquity of ftp.
How I got access to millions of [redacted] accounts
Microsoft Bug Bounty Evolution: Online Services
Popping a shell on the Oculus developer portal
Tesla Motors blind SQL injection vulnerability writeup
Google Sites: A Tale of Five Vulnerabilities
Re:Amazon packaging feedback cross-site scripting vulnerability
on Friday August 16, 2013 @06:41PM (#6227135)
Of course! I did know for certain there was no monetary benefit. A t-shirt would have been nice, but I investigated for the fun of it.
Re:Amazon packaging feedback cross-site scripting vulnerability
on Friday August 16, 2013 @11:56AM (#6224790)
Nice to meet you! There's always one that slips through the net ;-)