Stupid FTP question

callthatgirl

Well-Known Member
Vendor
Reaction score
3,110
Location
Fort Myers, FL
Hey gang,

I was thinking of a sneaky way to get my scan tools to clients who can't use IE or FF due to viruses.

If I have a copy of the tools on my FTP site, could they go to their run line and type in my FTP site and get there, with no IE or FF working?

Hmm, thought this may be a nice backdoor option. Thoughts?
 
Will read it in depth later, but I was hoping for a nice easy "user friendly" non-cmd line effort for the client.

Doesn't FTP in the run line open through explorer? Mine does, and from all the FTP I have done in the past, seems simple.

I have used CuteFTP before.
 
With FTP servers there are several ways to access them but permissions on your FTP server are key.

If you want to access a ftp server from explorer you can do it using a string such as ftp://ftp.microsoft.com/ They would still have to copy the files and run them if possible (viruses may have taken other application away)

Another idea might be to script out connecting to a FTP server, get certain files (ftp command to copy/ download is "get") and place them in a certain dir (c:\temp for example) The sky s the limit after that, you could even have your script install and run certain packages

sjc
Blaine Computer Serviceshttp://www.blainecomputerservices.com/
 
If your clients machines are already compromised then it depends on the level of Winsock corruption. If the Hosts file or other Winsock layers are severely damaged, then chances are the File Transfer Protocol will be misled as well.:eek:

IF FTP works, you'll need to setup an anonymous FTP server (no login required) This would be the simplest route. War FTP Daemon (warftp.org) is an oldie but a goodie in this respect. Make sure to allow for multiple client connects.

Also, In IE, Go to Tools / Internet Options / Advanced and make sure that 'Enable folder view for FTP sites' is turned on in your clients browser.

- Techie
 
There is probably a portable version of Filezilla (ftp client),
and you can use your webhost account as an FTP service.

Also, your remote support client should support file transfers.

Personally, I prefer going round with my external USB/eSATA hard disk.
 
I used to work in a call center and we would come across this every so often. Typing the ftp address into the run command didn't aways work as it actually runs through IE which was usually shot at this stage.

We used to use the ftp client from within the command line to download a fresh install of firefox. Once you had the commands in front of you it was usually pretty ok to do over the phone.
 
you can do something like this in a batfile just change the variables to your own username/password, ftp, and filename

Code:
SET USER=admin
SET PASSWORD=password
SET FTPSITE=ftp.blah.com
SET FILENAME=myfile.exe

echo user %USER% %PASSWORD% >c:\$.tmp 
echo lcd "%userprofile%\desktop" >>c:\$.tmp 
echo binary >>c:\$.tmp 
echo get %FILENAME% >>c:\$.tmp 
echo quit >>c:\$.tmp
ftp -v -i -n -s:c:\$.tmp %FTPSITE%
echo >c:\$.tmp
del c:\$.tmp 
start /wait %FILENAME%

it should download the program to the current user's desktop and execute the program




..oops i didnt read it right the first time for them to type out the commands you would have them go to start/run
type in "ftp" hit enter
then have them type each line below and hit enter after each line

open ftp.yoursite.com
####it'll prompt for your ftp username####
####it'll prompt for your ftp password####
binary
get myfile.exe

####it'll download the file####
myfile.exe
####the file should execute####
 
Last edited:
:eek:

ok, seems good. Does anyone want to a help a gal out? I know nothing of scripts or batfiles. I used them, but don't know how to write them up.

:cool:
 
:eek:

ok, seems good. Does anyone want to a help a gal out? I know nothing of scripts or batfiles. I used them, but don't know how to write them up.

:cool:

From the looks of it save the above file in notepad and name as you see fit with a .bat file extension and edit the areas like ftp site, filename, etc etc to reflect your ftp login and program paths and the rest is taken care of by the script...or so it would seem.
 
Last edited:
On same subject.

You could always get a developer to code a simple application for you. I'm sure wouldnt cost much especially if written in VB.

That way you could brand it on clients desktops and always there for future.

2 Simple options being on main screen

Is my browser working??

Yes - fires up their browser to your homepage/contact page/etc whichever you preffer.
NO - opens the no browser options.

No browser options:

1) Book appointment with Call that girl - which will open a new screen lets the user compose an email in a form and sends it to direct to yourself.
2) Get Remote Support - this probably the part that will the cost money as some are easier to integrate the client host than others.
3) Call that girl Tools - then lists options of the different types of tools , from there you can tell the user which one to select and will open up your ftp directory containing those type of tools. then only matter of the client selecting and downloading the one you tell them to.


Also any decent developer will be able to put it so that it self updates from your server on new releases of the app.

If client doesnt want it kept on their system after you leave its a simple uninstall if the do want it left its a contant reminder on their desktop of who to use for computer support

Obviously if it a brand new client and your not onsite, and they have not got working browser your going to have to talk them through download of a simple bat file which will grab the app and download it.

Benefits:

You can password protect your FTP server so only YOUR clients can access the tools.
Constant Branding on Clients Desktop
Simple couple of clicks for client to get to you
App would be small as not much too it.

Downsides:
Some clients will not want it - but aslong as uninstal easy that wouldnt be a problem.
App Support - some clients will eventally feck the app up so you will have added free support to give just on the app.
Cost - your time, effort, and the development costs, also future updates and bug fixes will need to be taken into account.
 
..oops i didnt read it right the first time for them to type out the commands you would have them go to start/run
type in "ftp" hit enter
then have them type each line below and hit enter after each line

open ftp.yoursite.com
####it'll prompt for your ftp username####
####it'll prompt for your ftp password####
binary
get myfile.exe

####it'll download the file####
myfile.exe
####the file should execute####

You are halfway there, just persevere a bit more :)

The standard ftp client included in windows can be run automatically and non-interactively and can take commands from a text file.

If you check the help system on ftp, or run "ftp -help", you will end up using something like:

firstly, in your $.tmp file:
Code:
ftp -i -s:FTPcommands.tmp ftp.yoursite.com

secondly, create another tmp text file with your batch file for the FTP commands; FTPcommands.tmp:
Code:
%username%
%password%
lcd %FTPdirectory%
binary
get %filename%
quit
 
Well, there are really many ways to accomplish what you are trying to do.

1. You can setup a freeware TFTP server on your server, have your client use TFTP commands from cmd.exe to download the files to their machines. But, as with ftp.exe, some malware will actually hook all calls to the application and prevent you from downloading files.

2. As another user already posted, you can use ftp.exe that's in the system32 directory to download your toolkit from your FTP server.

3. You can download netcat (nc.exe), and from cmd.exe execute (without quotes) "type fileyouwanttotransfer.vbs | nc.exe -l -p PUT-AN-UNUSED-PORT-HERE" You can then have your customer go to cmd.exe and type telnet YOURIP YOURLISTENINGPORT -f c:\filename.vbs. This will send your batch, or vbs file over a socket, and telnet will save the data to the log (C:\filename.vbs).

4. If you have already worked on the machine, or using the method stated above, you can leave a small vbs script in a windows directory that will download a WinRAR SFX (Executable Self extracting archive) that contains all the desired applications you'll need on your clients computer. There is nothing to install, all they need to do is click the file and your kit downloads. Here is an example that will download an application, and then execute it:
Code:
strFileURL = "h-t-t-p://yourwebsite/yourdirectory/yourapp.exe"
    strHDLocation = "c:\yourapp.exe"

' Fetch the file
    Set objXMLHTTP = CreateObject("MSXML2.XMLHTTP")

    objXMLHTTP.open "GET", strFileURL, false
    objXMLHTTP.send()

If objXMLHTTP.Status = 200 Then
Set objADOStream = CreateObject("ADODB.Stream")
objADOStream.Open
objADOStream.Type = 1 'adTypeBinary

objADOStream.Write objXMLHTTP.ResponseBody
objADOStream.Position = 0    'Set the stream position to the start

Set objFSO = Createobject("Scripting.FileSystemObject")
If objFSO.Fileexists(strHDLocation) Then objFSO.DeleteFile strHDLocation
Set objFSO = Nothing

objADOStream.SaveToFile strHDLocation
objADOStream.Close
Set objADOStream = Nothing
End if

Set objXMLHTTP = Nothing
Dim WshShell
Set WshShell =CreateObject("WScript.Shell")
WshShell.Run ("c:\yourapp.exe")
Set WsShell = Nothing
 
Back
Top