On Windows XP systems and earlier, the TFTP client is enabled by default. Nearly every OS has a TFTP client installed, but not always enabled. After grabbing the password hashes, we could then use TFTP to download the files to Kali for cracking offline. If we can install/use a TFTP server on our Kali system, then we can use it to upload hacking software to the target system from a command line.įor instance, if we wanted to grab the password hashes and crack them, we would need to upload samdump2 and pwdump to the target system like in this tutorial. It operates on a client/server architecture.

It is used to upload (GET) and download (PUT) files between computer systems without authentication. TFTP is a UDP/IP protocol that uses port 69. In each of these cases, to control and own the target system, we may have to upload additional software. In other cases, we may be able to connect to a command shell via Netcat or Cryptcat. For instance, with Metasploit, it's not always possible to get the all powerful Meterpreter on our target system. Sometimes, for a variety of reasons, we can only get a command shell on our target system.

Set up tftp server