GTFOBins.github.io/_gtfobins/puppet.md

---
functions:
  execute-non-interactive:
    - description: The executed command output shown in the puppet log format.
      code: |
        export CMD="/usr/bin/id"
        puppet apply -e "exec { '$CMD': logoutput => true }"
  file-write:
    - description: The file path must be absolute.
      code: |
        export LFILE="/tmp/file_to_write"
        puppet apply -e "file { '$LFILE': content => 'DATA' }"
  file-read:
    - description: The read file content is corrupted by the `diff` output format. The actual `/usr/bin/diff` command is executed.
      code: |
        export LFILE=file_to_read
        puppet filebucket -l diff /dev/null $LFILE
  sudo-enabled:
    - description: The executed command output shown in the puppet log format.
      code: |
        export CMD="/usr/bin/id"
        sudo puppet apply -e "exec { '$CMD': logoutput => true }"
---