# **Basic Information** According to [HTB Academy](https://academy.hackthebox.com/module/112/section/1066): > Trivial File Transfer Protocol (TFTP) is simpler than FTP and performs file transfers between client and server processes. However, it does not provide user authentication and other valuable features supported by FTP. In addition, while FTP uses TCP, TFTP uses UDP, making it an unreliable protocol and causing it to use UDP-assisted application layer recovery. > > This is reflected, for example, in the fact that TFTP, unlike FTP, does not require the user's authentication. It does not support protected login via passwords and sets limits on access based solely on the read and write permissions of a file in the operating system. Practically, this leads to TFTP operating exclusively in directories and with files that have been shared with all users and can be read and written globally. Because of the lack of security, TFTP, unlike FTP, may only be used in local and protected networks. # **Enumeration** ## **Scanning** ```bash ``` ## **TFTP Commands** ``` # set the remote host and port for file transfers connect # grab a file get # upload a file put # exit tftp quit # show transfer mode (ascii or binary), connection status, time-out value, etc. status # display additional information verbose ``` # **References** # **Practical Application** | Platform | Name | Notes | | -------- | ---- | ----- | | | | |