From 41d9312c53dbd84a30cf7a20bd186047e3179bcc Mon Sep 17 00:00:00 2001 From: LinuxSploit <68427058+LinuxSploit@users.noreply.github.com> Date: Sun, 11 Apr 2021 06:10:42 -0400 Subject: [PATCH] Add curl file-write --- _gtfobins/curl.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/_gtfobins/curl.md b/_gtfobins/curl.md index 94ec251..3b95f42 100644 --- a/_gtfobins/curl.md +++ b/_gtfobins/curl.md @@ -17,6 +17,13 @@ functions: code: | LFILE=/tmp/file_to_read curl file://$LFILE + file-write: + - description: The file path must be absolute. + code: | + LFILE=file_to_write + TF=$(mktemp) + echo DATA >$TF + curl "file://$TF" -o "$LFILE" suid: - description: Fetch a remote file via HTTP GET request. code: |