FStealer automates file system mirroring through remote file disclosure vulnerabilities on Linux machines. It uses both, initial path signatures and runtime analysis of downloaded files to recursively find new files. Because of its modularity it is trivial to extend it by writing your own file or path analysis.
7bb91f2cac6d07b8ae3bd059323cb08311ee2d94338082342179c5d1eafb9903