mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2025-01-24 04:22:52 +01:00
Fix line wrapping in function descriptions
This commit is contained in:
parent
2a2d2f2e4a
commit
2b005a1153
@ -3,94 +3,60 @@
|
|||||||
|
|
||||||
shell:
|
shell:
|
||||||
label: Shell
|
label: Shell
|
||||||
description: |
|
description: It can be used to break out from restricted environments by spawning an interactive system shell.
|
||||||
It can be used to break out from restricted environments by spawning an
|
|
||||||
interactive system shell.
|
|
||||||
|
|
||||||
command:
|
command:
|
||||||
label: Command
|
label: Command
|
||||||
description: |
|
description: It can be used to break out from restricted environments by running non-interactive system commands.
|
||||||
It can be used to break out from restricted environments by running
|
|
||||||
non-interactive system commands.
|
|
||||||
|
|
||||||
reverse-shell:
|
reverse-shell:
|
||||||
label: Reverse shell
|
label: Reverse shell
|
||||||
description: |
|
description: It can send back a reverse shell to a listening attacker to open a remote network access.
|
||||||
It can send back a reverse shell to a listening attacker to open a remote
|
|
||||||
network access.
|
|
||||||
|
|
||||||
non-interactive-reverse-shell:
|
non-interactive-reverse-shell:
|
||||||
label: Non-interactive reverse shell
|
label: Non-interactive reverse shell
|
||||||
description: |
|
description: It can send back a non-interactive reverse shell to a listening attacker to open a remote network access.
|
||||||
It can send back a non-interactive reverse shell to a listening attacker to
|
|
||||||
open a remote network access.
|
|
||||||
|
|
||||||
bind-shell:
|
bind-shell:
|
||||||
label: Bind shell
|
label: Bind shell
|
||||||
description: |
|
description: It can bind a shell to a local port to allow remote network access.
|
||||||
It can bind a shell to a local port to allow remote network access.
|
|
||||||
|
|
||||||
non-interactive-bind-shell:
|
non-interactive-bind-shell:
|
||||||
label: Non-interactive bind shell
|
label: Non-interactive bind shell
|
||||||
description: |
|
description: It can bind a non-interactive shell to a local port to allow remote network access.
|
||||||
It can bind a non-interactive shell to a local port to allow remote network
|
|
||||||
access.
|
|
||||||
|
|
||||||
file-upload:
|
file-upload:
|
||||||
label: File upload
|
label: File upload
|
||||||
description: |
|
description: It can exfiltrate files on the network.
|
||||||
It can exfiltrate files on the network.
|
|
||||||
|
|
||||||
file-download:
|
file-download:
|
||||||
label: File download
|
label: File download
|
||||||
description: |
|
description: It can download remote files.
|
||||||
It can download remote files.
|
|
||||||
|
|
||||||
file-write:
|
file-write:
|
||||||
label: File write
|
label: File write
|
||||||
description: |
|
description: It writes data to files, it may be used to do privileged writes or write files outside a restricted file system.
|
||||||
It writes data to files, it may be used to do privileged writes or write
|
|
||||||
files outside a restricted file system.
|
|
||||||
|
|
||||||
file-read:
|
file-read:
|
||||||
label: File read
|
label: File read
|
||||||
description: |
|
description: It reads data from files, it may be used to do privileged reads or disclose files outside a restricted file system.
|
||||||
It reads data from files, it may be used to do privileged reads or disclose
|
|
||||||
files outside a restricted file system.
|
|
||||||
|
|
||||||
library-load:
|
library-load:
|
||||||
label: Library load
|
label: Library load
|
||||||
description: |
|
description: It loads shared libraries that may be used to run code in the binary execution context.
|
||||||
It loads shared libraries that may be used to run code in the binary
|
|
||||||
execution context.
|
|
||||||
|
|
||||||
suid:
|
suid:
|
||||||
label: SUID
|
label: SUID
|
||||||
description: |
|
description: It runs with the SUID bit set and may be exploited to access the file system, escalate or maintain access with elevated privileges working as a SUID backdoor. If it is used to run `sh -p`, omit the `-p` argument on systems like Debian (<= Stretch) that allow the default `sh` shell to run with SUID privileges.
|
||||||
It runs with the SUID bit set and may be exploited to access the file
|
|
||||||
system, escalate or maintain access with elevated privileges working as a
|
|
||||||
SUID backdoor. If it is used to run `sh -p`, omit the `-p` argument on
|
|
||||||
systems like Debian (<= Stretch) that allow the default `sh` shell to run
|
|
||||||
with SUID privileges.
|
|
||||||
|
|
||||||
sudo:
|
sudo:
|
||||||
label: Sudo
|
label: Sudo
|
||||||
description: |
|
description: It runs in privileged context and may be used to access the file system, escalate or maintain access with elevated privileges if enabled on `sudo`.
|
||||||
It runs in privileged context and may be used to access the file system,
|
|
||||||
escalate or maintain access with elevated privileges if enabled on `sudo`.
|
|
||||||
|
|
||||||
capabilities:
|
capabilities:
|
||||||
label: Capabilities
|
label: Capabilities
|
||||||
description: |
|
description: It can manipulate its process UID and can be used on Linux as a backdoor to maintain elevated privileges with the `CAP_SETUID` capability set. This also works when executed by another binary with the capability set.
|
||||||
It can manipulate its process UID and can be used on Linux as a backdoor to maintain
|
|
||||||
elevated privileges with the `CAP_SETUID` capability set. This also works when executed
|
|
||||||
by another binary with the capability set.
|
|
||||||
|
|
||||||
limited-suid:
|
limited-suid:
|
||||||
label: Limited SUID
|
label: Limited SUID
|
||||||
description: |
|
description: It runs with the SUID bit set and may be exploited to access the file system, escalate or maintain access with elevated privileges working as a SUID backdoor. If it is used to run commands it only works on systems like Debian (<= Stretch) that allow the default `sh` shell to run with SUID privileges.
|
||||||
It runs with the SUID bit set and may be exploited to access the file
|
|
||||||
system, escalate or maintain access with elevated privileges working as a
|
|
||||||
SUID backdoor. If it is used to run commands it only works on systems like
|
|
||||||
Debian (<= Stretch) that allow the default `sh` shell to run with SUID
|
|
||||||
privileges.
|
|
||||||
|
Loading…
Reference in New Issue
Block a user