public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2025-11-04 02:38:43 +01:00
Code Issues Projects Releases Wiki Activity
651 Commits 1 Branch 0 Tags
646ea8132e6761087f7f70f47f6cceada97515f6
Commit Graph

651 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nick Blekherman
646ea8132e Revert limited-suid to suid and add -p in hping3 2021-01-18 09:40:50 +02:00
Nick Blekherman
b43f418ddb Add ./ to SUID category in nohup.mp 2021-01-18 09:36:35 +02:00
Shikata
561a5b2c9a Remove trailing space in awk.md line 31 2021-01-13 11:22:26 +02:00
Shikata
28cc7ff7da Add SUID [file read] category to sqlite3 2021-01-12 13:57:34 +02:00
Shikata
ae8271292a Add SUID [file read] category to lua 2021-01-12 13:50:43 +02:00
Shikata
47698d0cfb Add SUID [file read] category to ed 2021-01-12 13:44:19 +02:00
Shikata
fd719bb4b6 Add SUID category to awk 2021-01-12 13:39:52 +02:00
Shikata
a48303c2b9 Remove redundant sudo from SUID category in nohup 2021-01-11 16:18:18 +02:00
Shikata
211edf746b Switch SUID to Limited SUID in aria2c 2021-01-11 13:45:21 +02:00
Shikata
c09b95053f Fixed order of Limited SUID category in lwp-request 2021-01-11 13:02:54 +02:00
Shikata
05a9ae111b Switch SUID to Limited SUID in hping3 2021-01-11 13:02:11 +02:00
Shikata
9d1b86e9d3 Switch SUID to Limited SUID in lwp-request 2021-01-11 12:56:13 +02:00
Shikata
c4f93b87d5 Remove redundant lua -e from File Write and File Read categories in nmap 2021-01-11 12:37:37 +02:00
Shikata
db40142ea7 Remove redundant sudo from SUID category 2021-01-11 12:31:54 +02:00
Andrea Cardaci
bb4050810e Fix rpm[query] SUID 2021-01-10 18:27:30 +01:00
Andrea Cardaci
33fb39a183 Fix wrong nano and pico SUID 2021-01-10 18:16:30 +01:00
ritiksahni
01d4de40d2 Add dig 2021-01-10 12:31:51 +01:00
ritiksahni
9069b0c903 Add exiftool 2021-01-09 15:03:35 +01:00
Andrea Cardaci
89b421863f Add nmap file-write 2021-01-04 09:11:03 +01:00
Andrea Cardaci
5b2d89b99a Fix nmap SUID file-write 2021-01-04 09:05:21 +01:00
Syed Umar Arfeen
edc8a2d03d Adding another usage of Nmap's SUID 
I came along with this method on stackoverflow while trying to execute commands using a SUID nmap binary, though `--script` failed me but this works. Could be enough to demonstrate effect of using SUID on Nmap. 

I've yet to come up with a way to over-write the contents of the system file according to what we want, with this we can only over-write files with nmap output.

```bash
sudo touch /etc/filecantbetouched
nmap 127.0.0.1 -oN=/etc/filecantbetouched
cat /etc/filecantbetouched
```
 2021-01-04 12:16:29 +05:00
makikvues
1c07880178 Add hping3 2020-12-30 08:47:47 +01:00
Andrea Cardaci
2746e78a44 Use the more clean install command to create example SUIDs 2020-12-20 22:20:45 +01:00
Andrea Cardaci
65857d486b Merge pull request #147 from mindfuckup/master 2020-12-20 21:31:05 +01:00
Andrea Cardaci
c80e83c3c5 Make install similar to chmod 2020-12-20 21:24:10 +01:00
Andrea Cardaci
fbe4b42890 Improve split 2020-12-20 21:15:58 +01:00
Andrea Cardaci
2475ea0a5a Improve pr 2020-12-20 21:09:50 +01:00
Andrea Cardaci
c6502e8ddc Use base64 in basenc 2020-12-20 20:59:40 +01:00
Andrea Cardaci
7cfac08921 Improve the description of nroff 2020-12-20 20:54:05 +01:00
Andrea Cardaci
b05a84474b Improve the description of troff 2020-12-20 20:48:00 +01:00
Andrea Cardaci
dd16d538ce Improve the description of ssh-keyscan 2020-12-20 20:44:24 +01:00
Andrea Cardaci
54c20a1349 Improve the description of ss 2020-12-20 20:41:49 +01:00
Andrea Cardaci
5102eccdfc Fix psql shell path and remove suid 2020-12-20 20:36:55 +01:00
Andrea Cardaci
6a6485c44b Fix ex shell path and remove suid 2020-12-20 20:36:47 +01:00
Andrea Cardaci
dc3de20e84 Add note about column 2020-12-20 20:36:47 +01:00
Andrea Cardaci
4b2100bfae Fix check_log 2020-12-20 19:53:16 +01:00
Andrea Cardaci
ee8cce63f9 Replace command with shell in check_by_ssh 2020-12-20 19:32:15 +01:00
Andrea Cardaci
4cc9e40e3f Add yet another clarification 2020-12-05 19:31:46 +01:00
Andrea Cardaci
31af1e879f Avoid the "exploit" verb to reduce confusion 2020-12-05 17:52:03 +01:00
Xiaoyin Liu
12b8ceee39 Use HTTPS for the link yaml.org 
http://yaml.org/ redirects to https://yaml.org/. For visitors privacy and security, let's use HTTPS for this link.
 2020-11-29 12:59:57 +01:00
Yash Saxena
a38ccf2621 Add capsh 2020-11-27 14:22:31 +01:00
Andrea Cardaci
22899a5159 Improve update-alternatives 2020-11-17 18:54:53 +01:00
Michael Gisbers
e212f23455 Create update-alternatives.md 
Use update-alternatives with sudo to replace system binaries
 2020-11-17 18:54:53 +01:00
Emanuel Duss
286775860a Fixed syntax error 2020-11-13 12:46:01 +01:00
Emanuel Duss
de10e4761e Added missing shell file 2020-11-13 12:09:04 +01:00
Emanuel Duss
cb7cb672f2 New command: split 2020-11-13 11:59:14 +01:00
Emanuel Duss
c88e461484 New command: pr 2020-11-13 11:59:14 +01:00
Emanuel Duss
28b67bdfd5 New command: paste 2020-11-13 11:59:14 +01:00
Emanuel Duss
9e593b6ac0 New command: join 2020-11-13 11:59:14 +01:00
Emanuel Duss
146b146cd3 New command: install 2020-11-13 11:59:14 +01:00