Commit Graph

522 Commits

Author SHA1 Message Date
Andrea Cardaci
d4b50275bb Use DATA as a placeholder for file-write operations 2018-08-20 15:00:34 +02:00
Andrea Cardaci
866ca2e404 Fix other editors file write 2018-08-20 15:00:34 +02:00
Andrea Cardaci
b4b67ff10b Fix ed file read/write 2018-08-20 15:00:34 +02:00
Emilio Pinna
0ba5df0cb9 Use temporary files in zip functions 2018-08-19 11:32:48 +01:00
Emilio Pinna
a68ef39e30 Standardize tcpdump temporary file creation 2018-08-19 11:24:13 +01:00
Emilio Pinna
14c8781f2d Fix nmap description and temporary file 2018-08-19 11:20:37 +01:00
Emilio Pinna
f34aa31334 Remove docker interactive-execute 2018-08-19 11:14:16 +01:00
Andrea Cardaci
f740b410cc Simplify zip and add suid-limited 2018-08-19 11:43:26 +02:00
Andrea Cardaci
2ff760e560 Fix and simplify tcpdump 2018-08-19 11:43:26 +02:00
Andrea Cardaci
acf29564cb Simplify rsync and add interactive execute 2018-08-19 11:43:26 +02:00
Andrea Cardaci
7822ec33e8 Add suid, description and YAML fixes to nmap 2018-08-19 11:43:26 +02:00
Andrea Cardaci
c20ade4551 Make docker disposable, use sh instead of bash and add description 2018-08-19 11:43:26 +02:00
AlessandroZ
7219385a05 add new ways 2018-08-17 17:16:09 +02:00
Andrea Cardaci
6b73dcf283 Use the portable -u option for mktemp instead of removing the file
Close #15.
2018-07-31 12:44:16 +02:00
Emilio Pinna
53ad35fb10 Add suid-enabled and sudo-enabled to tftp 2018-07-22 18:24:39 +01:00
Emilio Pinna
3469b03e78 Add sudo-enabled and suid-limited to socat 2018-07-22 15:49:15 +01:00
Emilio Pinna
0f422cdd6a Reorder functions in git, lua, and nc 2018-07-22 15:42:43 +01:00
Emilio Pinna
38cd886b36 Describe which functions work with netcat traditional 2018-07-22 15:35:26 +01:00
Emilio Pinna
fbd8a68cae Add suid-limited and sudo-enabled to nc 2018-07-22 15:34:05 +01:00
Emilio Pinna
4de0246992 Use double backtick for inline code 2018-07-22 15:22:03 +01:00
Emilio Pinna
b016b7b9dd Add suid-enabled and sudo-enabled to curl, dd, and wget 2018-07-22 14:30:03 +01:00
Emilio Pinna
00a06edb07 Fix lua descriptions 2018-07-22 14:12:20 +01:00
Emilio Pinna
ef92163d03 Add git 2018-07-22 14:06:54 +01:00
Emilio Pinna
bfd61e93fc Add lua 2018-07-22 12:47:57 +01:00
Emilio Pinna
94f43fb943 Fix nc download description 2018-07-22 12:47:43 +01:00
Andrea Cardaci
e1cd3aed68 Fix YAMLs according to YAMLlint 2018-07-16 15:01:50 +02:00
Andrea Cardaci
a00f689760 Improve mount 2018-07-16 13:47:09 +02:00
Andrea Cardaci
e50f44521e Improve crontab 2018-07-16 13:37:17 +02:00
kk
85b99ce89f added crontab and mount 2018-07-16 10:00:14 +02:00
Emilio Pinna
d6895f367d Reorder functions in binaries 2018-07-04 19:26:52 +01:00
Emilio Pinna
80b20b6991 Add ruby download 2018-06-17 20:16:43 +01:00
Emilio Pinna
401c469b26 Add versions requirements on PHP and ruby 2018-06-17 20:08:02 +01:00
Emilio Pinna
50ffed4210 Replace more suid-limited execution with a suid-enabled read example 2018-06-17 11:39:42 +01:00
Emilio Pinna
7fa5b1e16e Use valid Mbox file for mail 2018-06-17 11:28:23 +01:00
Emilio Pinna
06966c8cd4 Remove mail suid-limited 2018-06-17 11:27:03 +01:00
Emilio Pinna
fce5a22341 Add sudo-enabled to cut 2018-06-16 16:13:16 +01:00
Roman Mueller
659002adef Add cut 2018-06-16 14:28:28 +01:00
Andrea Cardaci
b3fc53a9d3 Remove invalid SUID execute from sed 2018-06-13 16:42:02 +02:00
Andrea Cardaci
2da69686ac Fix sed execute and file write, also enforce standards 2018-06-13 16:05:57 +02:00
Roman Mueller
3c0e0bf1e3 Add execute-interactive & file-write to sed 2018-06-13 12:01:25 +02:00
Andrea Cardaci
0d786940c4 Add tar execute-non-interactive and file-read 2018-06-13 10:35:26 +02:00
Dov Murik
69465eb338 Add expand, unexpand 2018-06-12 19:29:34 +01:00
Andrea Cardaci
4b11771fec Avoid cat in bash 2018-06-12 16:17:34 +02:00
Andrea Cardaci
3b59c85656 Fix bash file read 2018-06-11 13:12:15 +02:00
Roman Mueller
7660674537 Add file-read to curl 2018-06-10 21:59:08 +01:00
Andrea Cardaci
2696bc3cde Fix make compatibility issues 2018-06-04 20:00:09 +02:00
Emilio Pinna
7e5bcab249 Replace where_to_save with file_to_save 2018-06-04 18:53:35 +01:00
Emilio Pinna
6a747b0920 Fix PHP interactive functions 2018-06-04 18:40:46 +01:00
Andrea Cardaci
b2731c2c91 Fix make suid shell 2018-06-04 19:13:16 +02:00
Andrea Cardaci
564dbe28fa Add base64, ltrace, make, sqlite3, time 2018-06-04 19:05:55 +02:00
Andrea Cardaci
81f12399fe Add compatibility notice in make 2018-06-04 18:59:07 +02:00
Andrea Cardaci
c31a8a1b6b Simplify make 2018-06-04 18:28:58 +02:00
Andrea Cardaci
4eff8b534f Fix time description 2018-06-04 17:23:26 +02:00
Andrea Cardaci
b2a2dccc82 Add execute-interactive to sqlite3 2018-06-04 17:16:57 +02:00
Andrea Cardaci
323553f4b0 Make base64 portable 2018-06-04 14:59:57 +02:00
Andrea Cardaci
0785f116d3 Clarify echo command in rlwrap file-write 2018-06-04 13:16:24 +02:00
Andrea Cardaci
3cc3be5aa5 Use /dev/null as history for rlwrap 2018-06-04 13:09:55 +02:00
Andrea Cardaci
069e7da89d Add sudo and suid to od 2018-06-04 13:01:44 +02:00
Andrea Cardaci
467e4e875d Fix od YAML 2018-06-04 13:01:25 +02:00
Andrea Cardaci
669f8f0373 Inhibit actual locking in flock 2018-06-04 12:46:28 +02:00
Dov Murik
5fa7efbc1c Add base64, ltrace, make, sqlite3, time 2018-06-04 10:21:53 +00:00
Dov Murik
3f8a62a253 Add flock, od, rlwrap 2018-06-03 20:22:08 +00:00
Roman Mueller
6e6cbb66a7 Remove non-interactive versions 2018-06-03 13:09:03 +01:00
Roman Mueller
1e443710a2 Add ProxyCommand executions to ssh 2018-06-03 13:09:03 +01:00
Andrea Cardaci
de8d657479 Fix typo in xargs 2018-06-03 12:30:34 +02:00
Andrea Cardaci
2463f9477a Add xargs file-read even though it uses the external echo command 2018-06-03 11:51:44 +02:00
Andrea Cardaci
d14b69c12f Add comment to puppet about diff 2018-06-03 11:41:27 +02:00
Andrea Cardaci
77edd09b07 Add output to puppet execute functions 2018-06-03 10:58:39 +02:00
Andrea Cardaci
6843fe84b5 Use consistent shell variable style in puppet 2018-06-03 10:30:07 +02:00
Andrea Cardaci
42997519e1 Fix sort file-read to avoid actually sorting lines
Thanks to @dubek.
2018-06-03 10:01:46 +02:00
Emilio Pinna
b6dfe3e083 Add diff 2018-06-02 16:02:38 +01:00
Emilio Pinna
234cfc0ebb Add puppet description 2018-06-02 15:55:12 +01:00
Roman Mueller
144e51b165 Add puppet 2018-06-02 14:29:54 +02:00
Andrea Cardaci
b3c405e2d5 Add sudo and suid to nl 2018-06-01 13:30:32 +02:00
Andrea Cardaci
5a1c87e7c5 Fix YAML literal blocks 2018-06-01 12:44:34 +02:00
Andrea Cardaci
b96f6e9a49 Fix YAMLs format 2018-06-01 00:22:34 +02:00
Emilio Pinna
bdf78c5e99 Add busybox 2018-05-31 20:09:44 +01:00
Andrea Cardaci
3a619c7777 Add whois
Thanks to https://twitter.com/info_dox/status/1001985728342102017
2018-05-31 20:24:56 +02:00
Andrea Cardaci
d95bc8a8dc Fix coherence in nc YAML 2018-05-31 20:24:56 +02:00
Andrea Cardaci
ce034dd7b0 Clarify ul corruption 2018-05-31 12:37:44 +02:00
Emilio Pinna
401486648a Add sort, ul, uniq 2018-05-30 19:15:29 +01:00
Emilio Pinna
1b5f2aedae Rephrase ssh read 2018-05-30 19:07:49 +01:00
Andrea Cardaci
852407bb02 Add tee 2018-05-30 19:20:51 +02:00
Andrea Cardaci
5aee2ec17e Add cat 2018-05-30 19:20:43 +02:00
Andrea Cardaci
66f60d7ef6 Use variables in dd 2018-05-30 12:56:08 +02:00
Andrea Cardaci
d937f2ba52 Use id as non-interactive command in php 2018-05-30 12:56:08 +02:00
Andrea Cardaci
bb001f1b8a Add xargs, nl and unshare 2018-05-30 12:55:36 +02:00
Andrea Cardaci
ab481fa4a5 Reduce the number of leading spaces in nl and comment about it 2018-05-30 12:54:05 +02:00
Andrea Cardaci
4c3c73a4b6 Add variables to nl 2018-05-30 12:45:42 +02:00
Andrea Cardaci
fa60f30f5a Remove suid-limited as it is superseded by suid-enabled 2018-05-30 12:26:29 +02:00
Andrea Cardaci
6563f19914 Remove xargs file-read as it relies on an external program 2018-05-30 11:53:20 +02:00
Andrea Cardaci
d3b3c390a4 Simplify xargs invocation 2018-05-30 11:53:20 +02:00
Dov Murik
d1906b7fdd Add unshare 2018-05-30 08:17:06 +00:00
Dov Murik
ca91885fce Add nl 2018-05-30 07:56:12 +00:00
Dov Murik
bbbff04e55 xargs: add file-read 2018-05-30 07:45:32 +00:00
Dov Murik
eb1ada7a62 Add xargs 2018-05-30 07:36:30 +00:00
Andrea Cardaci
1a739b4550 Add tar file-write 2018-05-30 00:46:04 +02:00
Andrea Cardaci
c634e3898f Fix pico execution functions as they require a file to work on 2018-05-29 20:43:54 +02:00
Andrea Cardaci
d665a38758 Fix nano execution functions as they require a file to work on 2018-05-29 20:41:55 +02:00
Emilio Pinna
4fbd4d3ab7 Add mail 2018-05-29 19:35:40 +01:00
Andrea Cardaci
5e0da38a4a Improve gdb link text 2018-05-29 19:47:51 +02:00
Emilio Pinna
d8c9db3561 Add nano and pico 2018-05-29 18:23:33 +01:00
Andrea Cardaci
481cd24a84 Fix ssh file-read 2018-05-29 17:11:36 +02:00
Paul Taylor
765d2d1aa4 Add file-read to ssh 2018-05-29 14:43:57 +02:00
Emilio Pinna
b457967d07 Add ksh 2018-05-28 21:07:51 +01:00
Andrea Cardaci
8f1d537d19 Add a note about python in gdb 2018-05-28 21:55:44 +02:00
Emilio Pinna
0834533edd Add dd 2018-05-28 20:35:35 +01:00
Andrea Cardaci
41e62d689a Add gdb file-write 2018-05-28 21:29:34 +02:00
Andrea Cardaci
1a46497ae9 Remove useless empty line 2018-05-28 20:17:13 +02:00
Andrea Cardaci
809975ce4c Add awk file-read/write 2018-05-28 20:12:44 +02:00
Andrea Cardaci
898e6cd656 Add file-write to bash 2018-05-28 20:12:44 +02:00
Andrea Cardaci
640956451b Avoid variable in bash file-read 2018-05-28 20:12:44 +02:00
Andrea Cardaci
004b4bf828 Fix trailing spaces 2018-05-28 20:12:44 +02:00
Andrea Cardaci
89985be143 Disallow backslashes in bash file-read 2018-05-28 20:12:44 +02:00
Emilio Pinna
c3710d7396 Add read-write to less, man, more, and vi 2018-05-28 20:12:44 +02:00
Emilio Pinna
ee57eeba90 Add read and write to python and ruby 2018-05-28 20:12:44 +02:00
Emilio Pinna
66b617c955 Add read/write for ash, bash, csh, dash, ed, and emacs 2018-05-28 20:12:44 +02:00
Andrea Cardaci
358628c2f2 Remove hardcoded instances of bash 2018-05-28 17:48:26 +02:00
Emilio Pinna
8185fca039 Fix watch sudo code 2018-05-27 18:31:52 +01:00
Emilio Pinna
614954c0d3 Fix watch sudo code 2018-05-27 18:31:27 +01:00
Emilio Pinna
35bd51047a Rephrase watch description 2018-05-27 18:28:51 +01:00
Emilio Pinna
39e2d3335c Add watch 2018-05-27 18:17:14 +01:00
Emilio Pinna
b06bb08f96 Fix description 2018-05-25 18:57:26 +01:00
Andrea Cardaci
36dcf7a836 Reorganize function names 2018-05-25 15:30:02 +02:00
Andrea Cardaci
2d3ebbbb05 Use the id command for non-interactive examples 2018-05-25 14:11:36 +02:00
Andrea Cardaci
0047d8bfb7 Add sudo and suid to php 2018-05-25 14:07:26 +02:00
Andrea Cardaci
4ea28f8c48 Use getenv instead of $_ENV in php as it is configuration-dependent 2018-05-25 11:19:13 +02:00
Andrea Cardaci
91c233f773 Make Emacs treat _gtfobins Markdown files like YAML 2018-05-25 02:16:18 +02:00
Andrea Cardaci
f0d72ff530 Fix trailing spaces 2018-05-25 01:10:39 +02:00
Andrea Cardaci
da0b49a840 Coherence in tar code 2018-05-25 01:03:51 +02:00
Andrea Cardaci
e885d4a6ee Remove the -p option from suid-limited
It is useless because:
- if Debian-like, it is not supported and does not drop anyway;
- otherwise the `system()`-like function already used a shell that dropped the
  privileges.
2018-05-25 00:57:42 +02:00
Andrea Cardaci
84f48081fb Remove the -p option from sudo-enabled (typo) 2018-05-25 00:51:49 +02:00
Andrea Cardaci
d7344a5230 Explicitly use the python2 command 2018-05-25 00:49:25 +02:00
Andrea Cardaci
dd04e1630a Remove unsupported dash functions 2018-05-25 00:28:16 +02:00
Andrea Cardaci
f0a22c23d3 Fix bash download script 2018-05-25 00:23:02 +02:00
Emilio Pinna
a442b4cf34 Wrap dash commands 2018-05-24 22:43:04 +01:00
Emilio Pinna
fda972eeaa Wrapping bash commands 2018-05-24 22:40:36 +01:00
Emilio Pinna
c6441d33ef Add dash 2018-05-24 21:47:10 +01:00
Emilio Pinna
a3867ccf28 Add ash command 2018-05-24 21:26:30 +01:00
Emilio Pinna
fba68a0259 Add wish non-interactive reverse shell 2018-05-24 21:10:43 +01:00
Emilio Pinna
feb07b18fb Rephrase network functions descriptions 2018-05-24 21:05:11 +01:00
Emilio Pinna
b857c98f92 Use target.com and attacker.com 2018-05-24 21:05:11 +01:00
Andrea Cardaci
414ee88fd8 Add node bind shell 2018-05-24 00:50:05 +02:00
Andrea Cardaci
ac79267e7e Simplify node reverse shell 2018-05-24 00:50:05 +02:00
Andrea Cardaci
6e2242d3f1 Fix node code style 2018-05-24 00:50:05 +02:00
Emilio Pinna
4e61de337a Add socat bind-shell 2018-05-23 20:55:36 +01:00
Emilio Pinna
af346441f2 Add node suid, sudo, and interactive 2018-05-23 20:17:43 +01:00
Emilio Pinna
48787a0e8e Add node reverse-shell 2018-05-23 19:47:50 +01:00
Andrea Cardaci
344209b99c Add missing sudo to setarch 2018-05-23 11:34:47 +02:00
Emilio Pinna
0a5168dc9a Replace default port number with 12345 2018-05-23 08:08:13 +01:00
Emilio Pinna
793cd12812 Introduce non-interactive reverse and bind shells 2018-05-23 08:06:50 +01:00
Andrea Cardaci
19710192c3 Truncate long lines in awk 2018-05-23 00:36:17 +02:00
Andrea Cardaci
4303bf854b Use the same IP for examples 2018-05-23 00:29:51 +02:00
Andrea Cardaci
dc9f4ff42c Add awk bind shell 2018-05-23 00:26:26 +02:00
Andrea Cardaci
f2be339850 Fix awk reverse shell 2018-05-23 00:21:55 +02:00
Emilio Pinna
c428d20365 Standardize awk reverse-shell 2018-05-22 23:03:37 +01:00
Andrea Cardaci
126f779732 Add awk reverse shell 2018-05-22 23:55:44 +02:00
Emilio Pinna
5f5598b1c3 Add tclsh reverse shell description 2018-05-22 22:07:10 +01:00
Emilio Pinna
24a7c20324 Add tclsh reverse shell 2018-05-22 22:04:46 +01:00
Emilio Pinna
43b68e46b1 Add socat 2018-05-22 21:40:27 +01:00
Emilio Pinna
ac29dc064d Fix telnet descriptions 2018-05-22 21:26:17 +01:00
Emilio Pinna
158291baa4 Add missing descriptions 2018-05-22 21:22:20 +01:00
Emilio Pinna
8f992a27f1 Add descriptions to python2 and python3 2018-05-22 21:18:06 +01:00
Emilio Pinna
d9612ec461 Rephrase bash 2018-05-22 21:17:51 +01:00
Emilio Pinna
e3d9c03c96 Add PHP reverse-shell description 2018-05-22 19:23:05 +01:00
Emilio Pinna
6a075ebeeb Add perl reverse-shell description 2018-05-22 19:21:16 +01:00
Emilio Pinna
1e34daccee Remove alternative bash reverse-shell 2018-05-22 19:10:17 +01:00
Emilio Pinna
028a202891 Add another bash reverse shell 2018-05-22 19:03:44 +01:00
Emilio Pinna
fad8425624 Add nc and bash other end commands 2018-05-22 18:57:05 +01:00
Andrea Cardaci
2fed778c51 Improve the description of ld.so 2018-05-22 12:40:35 +02:00
Andrea Cardaci
67a480ccce Add sftp 2018-05-22 11:58:12 +02:00
Emilio Pinna
b81e57005a First commit 2018-05-21 20:14:41 +01:00