wgetLOLBIN
Descarga ficheros al objetivo; a veces SUID abusable (GTFOBins).
Binario legítimo del sistema (LOLBIN): no es una herramienta ofensiva, pero un atacante lo aprovecha porque suele estar ya instalado y levantar menos sospechas que subir una herramienta propia.
Descargador HTTP/FTP no interactivo. En pentesting sirve para bajar herramientas al objetivo Linux, espejar sitios y FTP anónimos completos, y como binario permitido en algún sudo -l puede leer o sobrescribir ficheros con --use-askpass o --post-file.
Familia Acceso, shells y transferencia
Flags -r -O --use-askpass
Conceptos sudo escape with GTFOBins
Cheatsheet Transferencia de ficheros
Instalación
sudo apt install -y wgetComandos útiles
Aparece en
Algunas máquinas donde se documenta su uso; no es una lista exhaustiva.
- AccessProving Grounds Practice
- AlgernonProving Grounds Practice
- AmbassadorHackTheBox
- AstronautProving Grounds Practice
- AuthByProving Grounds Practice
- BartHackTheBox
- BastardHackTheBox
- BigPivotingDockerLabs
- BillybossProving Grounds Practice
- BitforgeProving Grounds Practice
- BlackMarket 1VulnHub
- BoardLightHackTheBox
- BookHackTheBox
- BountyHackTheBox
- BuffHackTheBox
- BullyboxProving Grounds Practice
- CelestialHackTheBox
- Cereal 1VulnHub
- CertifiedHackTheBox
- CompiledHackTheBox
- CraftProving Grounds Practice
- CraftyHackTheBox
- Darkhole 2VulnHub
- DC-1VulnHub
- DevelHackTheBox
- ExfiltratedProving Grounds Practice
- ExpresswayHackTheBox
- FishProving Grounds Practice
- FluProving Grounds Practice
- ForestHackTheBox
- HepetProving Grounds Practice
- HokkaidoProving Grounds Practice
- HunitProving Grounds Practice
- Infovore 1VulnHub
- InstantHackTheBox
- JackoProving Grounds Practice
- LateHackTheBox
- LaVitaProving Grounds Practice
- LinkVortexHackTheBox
- LolyProving Grounds Play
- MailingHackTheBox
- MantisProving Grounds Practice
- MonitorsThreeHackTheBox
- MzeeavProving Grounds Practice
- NagoyaProving Grounds Practice
- NibblesProving Grounds Practice
- NorCDockerLabs
- OpenSourceHackTheBox
- OptimumHackTheBox
- PCProving Grounds Practice
- PebblesProving Grounds Practice
- PeppoProving Grounds Practice
- ReadysProving Grounds Practice
- RedPandaHackTheBox
- SaunaHackTheBox
- SickOs 1.2VulnHub
- SightlessHackTheBox
- SorcererProving Grounds Practice
- SpiderSocietyProving Grounds Practice
- SquashedHackTheBox
- SquidProving Grounds Practice
- SupportHackTheBox
- SwagShopHackTheBox
- Symfonos 1 & 2VulnHub
- Symfonos 3VulnHub
- TeacherHackTheBox
- TricksterHackTheBox
- VaultProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WomboProving Grounds Practice
- XposedAPIProving Grounds Practice
- ZabProving Grounds Practice
- ZenPhotoProving Grounds Practice