I've used Villain and noticed it currently supports uploading but lacks a robust file download feature (victim → attacker). I wanted to suggest implementing something similar to what Penelope Shell Handler does, which handles this elegantly.
Proposed: Add a download command with:
- Streaming tar.gz transfer (minimal footprint on victim)
- Glob pattern support (
/etc/*.conf, /var/log/*)
- Automatic space validation and error handling
- Directory structure preservation
Usage:
download /etc/passwd <session_id>
download /var/www/html/* <session_id>
Reference: Penelope Shell Handler has a clean implementation using in-memory tar streams over existing session channels.