certutilLOLBIN
Windows LOLBIN; handy to download files to the target.
Legitimate system binary (LOLBIN): not an offensive tool as such, but an attacker leverages it because it is usually already installed and raises fewer suspicions than dropping a dedicated tool.
A legitimate Windows binary (LOLBIN) meant to manage certificates, repurposed to download files from the attacker and encode/decode base64. Very handy on Windows shells with no direct Internet egress or comfortable PowerShell.
Family Access, shells & transfer
Flags -urlcache -split -f
Cheatsheet File transfer
Installation
# Windows builtin (LOLBIN), no installation neededUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AccessProving Grounds Practice
- ArcticHackTheBox
- AuthByProving Grounds Practice
- BartHackTheBox
- BastardHackTheBox
- BillybossProving Grounds Practice
- BlueHackTheBox
- BountyHackTheBox
- ChatterboxHackTheBox
- CraftProving Grounds Practice
- CraftyHackTheBox
- FishProving Grounds Practice
- HepetProving Grounds Practice
- JackoProving Grounds Practice
- MedJedProving Grounds Practice
- NagoyaProving Grounds Practice
- NickelProving Grounds Practice
- OptimumHackTheBox
- ServmonHackTheBox
- ShenziProving Grounds Practice
- SquidProving Grounds Practice