Re: [PEN-TEST] NT CLI FTP Client Passive Mode?

[The Cyberiad <cyberiad () CYBERUS CA>]

Can you TFTP back out to your attack server to
pull down your survey tools ? Assuming you have
a command line to the target server, make it easy and
PKZIP (with the CLI version of PKZIP) your survey
tools and convert them to an exe on your attack box. Then
you only have to TFTP the one file to the target server
and run it to unzip your survey kit.

Cyberiad

----- Original Message -----
From: Jay D. Dyson <jdyson () TREACHERY NET>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Friday, November 17, 2000 6:37 AM
Subject: [PEN-TEST] NT CLI FTP Client Passive Mode?


> -----BEGIN PGP SIGNED MESSAGE-----
>
> Hi folks,
>
> I'm doing my thing here in testing a client's security and I've
> managed a few intrusions thus far.  However, one thing has me stymied: I'm
> looking to transfer a few files over to the client's server so I can start
> testing the intranet.  Normally I'd exploit a deficiency with the PUT to
> the server, but that's been fixed.  Thus, I'm trying to FTP from the
> system I'm in.
>
> The system I'm in is behind a firewall with restrictions on
> outbound FTP, so I've been trying to get the WinNT standard-issue CLI FTP
> client to grok passive mode.  No joy.  I've done the perfunctory
> GoogleSearch(tm) and it seems there's a lot of folks who have run up
> against this, but no-one with any solutions.  I'm hoping someone here has
> overcome this stumbling block and can provide some insights.
>
> Thanks much in advance.  I'm off to sleep now...
>
> - -Jay
>
>    (                                                             ______
>    ))   .-- "There's always time for a good cup of coffee." --.   >===<--.
>  C|~~| (>------- Jay D. Dyson --- jdyson () treachery net -------<) |   = |-'
>   `--'  `- I'm not surrounded, I just have more targets now. -'  `-----'
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
>
> iQCVAwUBOhUYmtCClfiU/BIVAQFwMQQAh6dw+QYA8opjmM6khR9gLZviXEUjGjJv
> Dj41U6IoBPBpccLmflTA+afCAbdZv5dv+FHyBjo1hhHQdaB0kdfGTEimpROfWJOH
> 5lEzmjXIM5RqsTPps1cG5yXGHkIsUSFKNYdWE/dcN7PlPBQna1bC8sKLJJJY3zZ3
> 5AsI7d75Xfg=
> =XCob
> -----END PGP SIGNATURE-----