public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 14:30:07 +01:00
Code Issues Projects Releases Wiki Activity

Added file-write using tcpdump

Browse Source
This commit is contained in:
Blayne Dreier 2024-01-12 08:13:06 +13:00
parent 4eca50ea16
commit 3c131d0d7d
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
_gtfobins/tcpdump.md
View File

@ -4,6 +4,12 @@ description: |
In recent distributions (e.g., Debian 10 and Ubuntu 18) AppArmor limits the `postrotate-command` to a small subset of predefined commands thus preventing the execution of the following. In recent distributions (e.g., Debian 10 and Ubuntu 18) AppArmor limits the `postrotate-command` to a small subset of predefined commands thus preventing the execution of the following.
functions: functions:
file-write:
- description: It writes data to files, it may be used to do privileged writes or write files outside a restricted file system.
code: |
LFILE=file_to_write
USER=output_file_owner
tcpdump -ln -i lo -w $LFILE -c 1 -Z $USER
command: command:
- code: | - code: |
COMMAND='id' COMMAND='id'