Commit Graph

365 Commits

Author SHA1 Message Date
brian
3bd955e8cc Use os.execute instead of posix.exec in rpm
From rpm versions 4.9.0 and on, posix.exec() will return an error unless called
from a child process created with posix.fork(). os.execute() may be used
instead.

This change is documented in these two resources:

- http://rpm.org/user_doc/lua.html
- https://rpm-packaging-guide.github.io/

Close #53.
2019-02-14 12:32:18 +01:00
Emilio
52a2f4cdc7 Add Lua payloads to rvim 2019-02-03 10:21:45 +00:00
Emilio
d111e78b45 Add Lua payloads to vim 2019-02-03 10:15:53 +00:00
Emilio
9dc5fa2128 Add dnf thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 16:15:49 +00:00
Emilio
a0674eb8f0 Add other sudo to rpm thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 15:54:57 +00:00
Emilio
b330297943 Add yum thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 15:46:01 +00:00
Emilio
7a3ae6e05a Add dpkg thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 15:13:28 +00:00
Emilio
3166a321c0 Add script 2019-02-02 10:02:14 +00:00
Emilio Pinna
fc59ef546f Add arp and mtr. Thanks to https://twitter.com/insecurity_ltd/status/1087727178295529473 2019-01-30 23:07:40 +00:00
Andrea Cardaci
d0464d7ce8 Drop useless echo indentation 2019-01-29 14:25:16 +01:00
bstapes
a2886b643d Add systemctl 2019-01-29 14:12:29 +01:00
Andrea Cardaci
0109792b7e Clarify bash reverse shell 2019-01-25 16:41:15 +01:00
in.security
3a53c6339e Add ip 2019-01-25 16:40:42 +01:00
Emilio Pinna
1719c4ffda Polish gimp description 2019-01-22 20:21:20 +00:00
Emilio Pinna
8782ccb96b Fix gimp description 2019-01-22 20:19:39 +00:00
Emilio Pinna
ee7b68232f Add gimp description 2019-01-22 20:17:00 +00:00
Emilio Pinna
69b8eb1056 Fix gimp file write 2019-01-22 20:13:34 +00:00
Emilio
9180d550e7 Add gimp thanks to https://twitter.com/Geluchat/status/1083743529388687361 2019-01-21 20:53:48 +00:00
Andrea Cardaci
bab4250775 Fix apt sudo shell 2019-01-21 16:41:17 +01:00
Andrea Cardaci
21f760676c Add alternative apt* shell technique
Thanks to
https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/

Also related to #38.
2019-01-21 16:28:20 +01:00
Andrea Cardaci
4fdaada820 Fix apt* shell
The Bash process substitution doesn't work (anymore?).
2019-01-21 15:40:28 +01:00
Andrea Cardaci
f6b29ce958 Mention the SPELL environment variable in nano 2019-01-21 14:07:14 +01:00
egre55
3e103b2f28 Add logsave 2019-01-15 12:22:21 +01:00
Emilio
732e4f9ae4 Add missing description to gdb sudo 2019-01-05 11:28:25 +00:00
Emilio
31be45fbde Add sudo to red 2019-01-05 11:24:49 +00:00
Emilio
76f0b9cf45 Adjust and add file-write, file-read, and library-load to irb 2019-01-01 23:06:00 +00:00
Shaksham Jaiswal
1cbe81b195 Add irb (#44) 2019-01-03 20:17:38 +00:00
Emilio
9047ee345c Use shorten ruby file download from #44 2019-01-02 15:28:13 +00:00
Andrea Cardaci
c156f48e5f Fix SUID and document readelf 2019-01-02 13:41:10 +01:00
0rbz
6ebfcef36c
Create readelf.md 2018-12-31 14:58:24 -05:00
Andrea Cardaci
9652aee337 Add comments to rlogin
Close #45.
2018-12-31 13:35:36 +01:00
0rbz
c1ea5f2b41 Create rlogin.md 2018-12-31 13:35:36 +01:00
Emilio Pinna
bbfcb5b633 Keep cancel description consistent 2018-12-31 09:40:49 +01:00
0rbz
63147892c4 Create cancel.md (#43)
* Add cancel.md
2018-12-31 09:38:20 +01:00
Qazeer
809b60ef97 Add nmap interactive mode 2018-12-24 18:39:24 +01:00
Emilio Pinna
e404981c2e Add reverse-shell, file-upload, file-download, library-load, and capabilities to rvim 2018-12-18 15:19:41 +01:00
Emilio Pinna
6befd62430 Add reverse-shell, file-upload, file-download, library-load, and capabilities to vim 2018-12-18 15:11:03 +01:00
Emilio Pinna
d3ef67aa3a Remove suid from vim 2018-12-18 14:28:09 +01:00
Emilio Pinna
4910c32409 Skim wrong functions from original vi 2018-12-18 14:04:05 +01:00
Emilio Pinna
9432a6ce3c Add Python 3 comment in vim and rvim 2018-12-18 13:31:22 +01:00
Chris Frederick
cda1654809 Add openssl-enc commands (#41) 2018-12-17 14:46:30 +01:00
s3krit
a659ed5d5f Add file 2018-12-12 18:08:22 +01:00
Andrea Cardaci
32b113b003 Fix and add SUID to other vi
Related to #39.
2018-12-03 16:00:11 +01:00
Andrea Cardaci
e066c22c1f Fix YAML format in vi 2018-12-03 16:00:01 +01:00
Andrea Cardaci
ed9363fe2d Fix broken shells in vi
Related to #39.
2018-12-03 15:59:37 +01:00
Emilio Pinna
279381cf3c Polish rvim, vi, and vim 2018-12-03 13:15:57 +00:00
Hugo DELVAL
bd0cad0433 Add vi(m) commands (#39) 2018-12-03 13:06:41 +00:00
Andrea Cardaci
46fd726c5a Improve 'apt-* install' entries
Improve description, enforce standards and make sure that the package will not
be installed.

Related #38.
2018-11-29 14:25:49 +01:00
HugoDelval
736f3482d3 Add apt(-get) entries 2018-11-29 13:51:39 +01:00
g0tmi1k
2d3071ef55 Typo: LFILE -> $LFILE (DD command) 2018-11-20 13:40:19 +01:00
Andrea Cardaci
f111f3e261 Split run-mailcap into functions
Close #34.
2018-11-19 14:04:01 +01:00
egre55
892949d4af Add run-mailcap 2018-11-19 13:30:43 +01:00
Andrea Cardaci
df1efb0437 Fix cpan YAML 2018-11-12 15:48:31 +01:00
egre55
d5405933d1 Add run-parts 2018-11-12 15:45:29 +01:00
Andrea Cardaci
3cbfa05169 Add dmesg
Close #32.
2018-11-12 15:11:50 +01:00
Andrea Cardaci
23dae5406e Minor fixes on cpan 2018-11-12 15:11:50 +01:00
egre55
a448ed5c25 Add dmsetup (#31)
* Add dmsetup

* fixes
2018-11-10 18:39:18 +00:00
Emilio Pinna
27c1c56577 Polish cpan 2018-11-08 20:01:40 +00:00
Shaksham Jaiswal
754e5e0f95 variable fix 2018-11-08 20:00:23 +00:00
Shaksham Jaiswal
f6d6019515 added environment variables 2018-11-08 20:00:23 +00:00
Shaksham Jaiswal
b78d64c236 made fixes, thanks to egre55 2018-11-08 20:00:23 +00:00
Shaksham Jaiswal
e600a4e610 indentation fixes 2018-11-08 20:00:23 +00:00
Shaksham Jaiswal
b3a6e93b78 Add cpan 2018-11-08 20:00:23 +00:00
Andrea Cardaci
66844f9cc4 Fix YAML format in start-stop-daemon 2018-11-05 16:41:04 +01:00
egre55
86e249e812 Add start-stop-daemon 2018-11-05 16:34:57 +01:00
Andrea Cardaci
ae79cfa550 Add limited suid to pic
Related to #28.
2018-11-02 23:47:20 +01:00
egre55
0b62b20891 Add pic 2018-11-02 23:45:58 +01:00
Andrea Cardaci
3cd9494b9b Remove limited-suid from man 2018-10-23 13:55:21 +02:00
Andrea Cardaci
0c8a06246b Add --to-command interactive shell to tar
Close #27
2018-10-21 12:13:17 +02:00
Andrea Cardaci
a7818d5f16 Promote tar command to interactive shell 2018-10-21 12:13:17 +02:00
Emilio Pinna
fdda727eb1 Add jjs 2018-10-14 21:01:33 +01:00
Emilio Pinna
7ad0233b33 Add description to jrunscript reverse-shell 2018-10-14 21:01:24 +01:00
Emilio Pinna
46e293e444 Describe jrunscript suid limitations 2018-10-13 13:36:24 +01:00
Emilio Pinna
26151d0c44 Add jrunscript 2018-10-12 18:39:39 +01:00
Emilio Pinna
d7d463ee0c Add missing SUID in gdb 2018-10-08 22:51:52 +01:00
Emilio Pinna
2377be5a55 Fix suid in PHP 2018-10-08 20:56:51 +01:00
Emilio Pinna
f14e511218 Fix python SUID 2018-10-08 20:14:25 +01:00
Emilio Pinna
dd337b5ddf Adopt new function names 2018-10-05 18:55:38 +01:00
Andrea Cardaci
1dfb03b013 Add description about grep flavors
Related to #26.
2018-10-03 14:44:55 +02:00
Roman Mueller
0bca156294 Add grep 2018-10-03 14:22:27 +02:00
Andrea Cardaci
fbb0ccefa4 Add info about pager in journalctl
Close #25.
2018-10-02 22:52:08 +02:00
Roman Mueller
7d3a6ddd9d Add journalctl 2018-10-02 22:52:05 +02:00
Emilio Pinna
9514d41a80 Remove capabilities-enabled from pip 2018-09-29 10:54:33 +01:00
Emilio Pinna
a156e10996 Use LFILE in easy_install and pip file-write function 2018-09-29 10:51:00 +01:00
Emilio Pinna
f8dab26569 Rephrase easy_install descriptions 2018-09-29 10:47:19 +01:00
Emilio Pinna
9dc6a93e5b Add download to easy_install 2018-09-29 10:46:03 +01:00
Emilio Pinna
c2224a6b49 Add easy_install file-write 2018-09-28 17:57:23 +01:00
Emilio Pinna
0e639583d6 Add easy_install 2018-09-27 22:53:55 +01:00
Emilio Pinna
5087fa15ef Remove pip description 2018-09-27 22:00:56 +01:00
Emilio Pinna
be7f7b87a0 Remove capabilities-enabled and sudo-enabled from pip 2018-09-27 21:54:50 +01:00
Emilio Pinna
1321a330a5 Fix pip setcap 2018-09-27 21:43:28 +01:00
Emilio Pinna
ce111369f3 Try add python payloads to pip 2018-09-27 21:34:49 +01:00
Andrea Cardaci
0db7fe5f32 Fix pip to work in both Linux and macOS 2018-09-27 12:58:29 +02:00
Emilio Pinna
3c59b1c2fc Add python functions to gdb 2018-09-25 22:44:12 +01:00
Emilio Pinna
12aa95cf2f Fix pip description 2018-09-25 22:16:12 +01:00
Emilio Pinna
0ec8e7d99d Fix gdb description 2018-09-25 22:02:25 +01:00
Emilio Pinna
1222c37802 Merge python2 and python3 2018-09-25 21:41:31 +01:00
Emilio Pinna
ebb9fd00be Fix python3 upload 2018-09-25 20:37:38 +01:00
Emilio Pinna
d3659b5cc6 Fix python2 upload 2018-09-25 20:37:38 +01:00
Andrea Cardaci
689e00461d Get rid of base64 for curl and wget and make descriptions similar
Close #24.
2018-09-25 19:56:27 +02:00