Skip to content

[Feature Request] Implement efficient file download functionality similar to Penelope's approach #198

@strikoder

Description

@strikoder

I've used Villain and noticed it currently supports uploading but lacks a robust file download feature (victim → attacker). I wanted to suggest implementing something similar to what Penelope Shell Handler does, which handles this elegantly.

Proposed: Add a download command with:

  • Streaming tar.gz transfer (minimal footprint on victim)
  • Glob pattern support (/etc/*.conf, /var/log/*)
  • Automatic space validation and error handling
  • Directory structure preservation

Usage:

download /etc/passwd <session_id>
download /var/www/html/* <session_id>

Reference: Penelope Shell Handler has a clean implementation using in-memory tar streams over existing session channels.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions