From 33a485b2b9c19dd0646ee8640020210ee4203a5b Mon Sep 17 00:00:00 2001
From: Dov Murik <dov.murik@gmail.com>
Date: Tue, 12 Jun 2018 14:06:16 +0000
Subject: [PATCH] Add expand, unexpand

---
 _gtfobins/expand.md   | 17 +++++++++++++++++
 _gtfobins/unexpand.md | 15 +++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 _gtfobins/expand.md
 create mode 100644 _gtfobins/unexpand.md

diff --git a/_gtfobins/expand.md b/_gtfobins/expand.md
new file mode 100644
index 0000000..efdda0c
--- /dev/null
+++ b/_gtfobins/expand.md
@@ -0,0 +1,17 @@
+---
+description: |
+  The read file content is corrupted by replacing tabs with spaces; not binary-safe.
+functions:
+  sudo-enabled:
+    - code: |
+        LFILE=file_to_read
+        sudo expand "$LFILE"
+  suid-enabled:
+    - code: |
+        LFILE=file_to_read
+        ./expand "$LFILE"
+  file-read:
+    - code: |
+        LFILE=file_to_read
+        expand "$LFILE"
+---
diff --git a/_gtfobins/unexpand.md b/_gtfobins/unexpand.md
new file mode 100644
index 0000000..886d27f
--- /dev/null
+++ b/_gtfobins/unexpand.md
@@ -0,0 +1,15 @@
+---
+functions:
+  sudo-enabled:
+    - code: |
+        LFILE=file_to_read
+        sudo unexpand -t99999999 "$LFILE"
+  suid-enabled:
+    - code: |
+        LFILE=file_to_read
+        ./unexpand -t99999999 "$LFILE"
+  file-read:
+    - code: |
+        LFILE=file_to_read
+        unexpand -t99999999 "$LFILE"
+---