利用certutil.exe 传文件

Posted 2020-10-25 安全工搬砖笔记

certutill.exe 在Windows 7 及其之后的所有Windows Server和Workstation版本均预装

1. Encode file:

 certutil -encode kk.vbs kk_encode.vbs

 

2. Upload to target:

3. Decode file:

cmd /c   certutil -decode  D:\\\\apache-tomcat-7.0.40\\\\webapps\\\\ROOT\\\\xxx.txt   c:\\\\windows\\\\temp\\\\aaa.vbs

Check file after decode:
cmd /c    type  c:\\\\windows\\\\temp\\\\aaa.vbs

4. Run:

cmd /c cscript c:\\windows\\temp\\aaa.vbs