- To enumerate:
nmap -n -Pn -sU -p69 -sV --script tftp-enum <IP>
- Cannot list folder, so need to use things like
get windows\system32\license.rtf
(or similar) - If want to upload, use
binary
, thenput xx.exe
- If transferring text file can use the default mode. If not need to use
mode binary
to download exe files. (default ismode ascii
)
TFTPY
The actual TFTP sucks.. Use this better..
- (DONE) In case not installed, go python2 folder,
pipenv shell
, thenpython -m pip install tftpy.
- Go python2 script folder,
pipenv shell
. Then executepython
. - Next (change IP, path, port accordingly):
import tftpy
client = tftpy.TftpClient('10.11.1.111', 69)
client.download('\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Backup\master.mdf', 'master.mdf')
- Can upload as well in a similar manner:
client.upload(input=srcfilepath, filename=destfilepath)