wget

Linux download T1105

Non-interactive network downloader. Used to fetch files from HTTP/FTP servers, download payloads, or stage tools.

Binary Paths

  • /usr/bin/wget
  • /bin/wget

Glob Patterns

Pattern Notes
wge?
Wildcard replaces 't'
w*t
Star matches 'ge'
wg[e]t
Character class around 'e'
w?et
Wildcard replaces 'g'
w?e?
Two wildcards replace 'g' and 't'
/usr/bin/wge?
Full path wildcard on last char
/???/bin/wget
Obfuscate /usr/ directory
/???/???/w*
Full path with mixed wildcards
w[g]et
Bracket class on second char
wge[t]
Bracket class matching last two chars (matches any single char in set)
for p in /usr/{bin,sbin}/wget; do "$p" && break; done
Brace expansion in for loop — tries both path alternatives
$(ls /usr/bin/wge?)
ls resolves glob to /usr/bin/wget; command substitution executes it
$'\x77\x67\x65\x74'
ANSI-C hex escapes expand to 'wget' before execution

Pattern Tester

$

Try typing wget or a full path like /usr/bin/wget

YARA Rule

Auto-generated detection rule for wget

      

Resources

← Previous vim Catalog Next → whoami