wgetLOLBIN
Downloads files to the target; sometimes an abusable SUID (GTFOBins).
Legitimate system binary (LOLBIN): not an offensive tool as such, but an attacker leverages it because it is usually already installed and raises fewer suspicions than dropping a dedicated tool.
A non-interactive HTTP/FTP downloader. In pentesting it pulls tools onto a Linux target, mirrors whole sites and anonymous FTPs, and as an allowed binary in some sudo -l it can read or overwrite files via --use-askpass or --post-file.
Family Access, shells & transfer
Flags -r -O --use-askpass
Concepts sudo escape with GTFOBins
Cheatsheet File transfer
Installation
sudo apt install -y wgetUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AccessProving Grounds Practice
- AlgernonProving Grounds Practice
- AmbassadorHackTheBox
- AstronautProving Grounds Practice
- AuthByProving Grounds Practice
- BartHackTheBox
- BastardHackTheBox
- BigPivotingDockerLabs
- BillybossProving Grounds Practice
- BitforgeProving Grounds Practice
- BlackMarket 1VulnHub
- BoardLightHackTheBox
- BookHackTheBox
- BountyHackTheBox
- BuffHackTheBox
- BullyboxProving Grounds Practice
- CelestialHackTheBox
- Cereal 1VulnHub
- CertifiedHackTheBox
- CompiledHackTheBox
- CraftProving Grounds Practice
- CraftyHackTheBox
- Darkhole 2VulnHub
- DC-1VulnHub
- DevelHackTheBox
- ExfiltratedProving Grounds Practice
- ExpresswayHackTheBox
- FishProving Grounds Practice
- FluProving Grounds Practice
- ForestHackTheBox
- HepetProving Grounds Practice
- HokkaidoProving Grounds Practice
- HunitProving Grounds Practice
- Infovore 1VulnHub
- InstantHackTheBox
- JackoProving Grounds Practice
- LateHackTheBox
- LaVitaProving Grounds Practice
- LinkVortexHackTheBox
- LolyProving Grounds Play
- MailingHackTheBox
- MantisProving Grounds Practice
- MonitorsThreeHackTheBox
- MzeeavProving Grounds Practice
- NagoyaProving Grounds Practice
- NibblesProving Grounds Practice
- NorCDockerLabs
- OpenSourceHackTheBox
- OptimumHackTheBox
- PCProving Grounds Practice
- PebblesProving Grounds Practice
- PeppoProving Grounds Practice
- ReadysProving Grounds Practice
- RedPandaHackTheBox
- SaunaHackTheBox
- SickOs 1.2VulnHub
- SightlessHackTheBox
- SorcererProving Grounds Practice
- SpiderSocietyProving Grounds Practice
- SquashedHackTheBox
- SquidProving Grounds Practice
- SupportHackTheBox
- SwagShopHackTheBox
- Symfonos 1 & 2VulnHub
- Symfonos 3VulnHub
- TeacherHackTheBox
- TricksterHackTheBox
- VaultProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WomboProving Grounds Practice
- XposedAPIProving Grounds Practice
- ZabProving Grounds Practice
- ZenPhotoProving Grounds Practice