public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-26 14:59:44 +01:00
Code Issues Projects Releases Wiki Activity
331 Commits 1 Branch 0 Tags 7 MiB
81b87f033e
Commit Graph

252 Commits

Author SHA1 Message Date
Andrea Cardaci
8eaf595fe6 Make interactive execute whenever possible 
Here the trick is to restore those file descriptors (0, 1, 2) that have been
redirected (`dup2`) by the parent process.

First we need to determine which one has been redirected, for example by looking
at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0,
1 or 2 respectively, where `x` is any file descriptor number that points to the
TTY.

It may happen that no file descriptor is unchanged, in that case we can use
`tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty)
 2018-09-07 01:11:06 +02:00
Andrea Cardaci
5b79154cf1 Avoid output file for tcpdump 2018-09-07 00:29:58 +02:00
Andrea Cardaci
ab62d024b1 Make xargs execute-interactive 2018-09-06 23:35:27 +02:00
Andrea Cardaci
7c0fa85a66 Make nano/pico execute-interactive by using exec 2018-09-06 21:36:20 +02:00
Andrea Cardaci
65c3d3409f Fix ssh execute 2018-09-06 20:40:36 +02:00
Andrea Cardaci
14ea39d22f Fix description long lines 2018-09-06 19:18:22 +02:00
Andrea Cardaci
d180391d7e Fix Python link in pip 2018-09-06 19:18:12 +02:00
Andrea Cardaci
7d9465bd6a Add pip 
As suggested by #20.
 2018-09-06 18:46:22 +02:00
Andrea Cardaci
9c96140f1d Add date 
Thanks to #20.
 2018-09-06 17:08:01 +02:00
Emilio Pinna
cb695abfa6 Add chmod and chown as suggested in #20 2018-09-05 17:59:07 +01:00
Emilio Pinna
f2ab6a6283 Remove file-read and file-write from cp and mv 2018-09-05 17:38:32 +01:00
Andrea Cardaci
aab8e783ec Add facter 
Thanks to #20.
 2018-09-04 13:42:37 +02:00
Emilio Pinna
d5f546b67d Polish cp and mv descriptions 2018-09-03 21:40:09 +01:00
Emilio Pinna
08a82c913a Add mv as suggested in #20 2018-09-03 21:38:22 +01:00
Emilio Pinna
508a06c14a Add cp as suggested in #20 2018-09-03 21:33:24 +01:00
Andrea Cardaci
8f4b085807 Fix shuf YAML 2018-08-31 15:51:14 +02:00
Andrea Cardaci
6bfc58daab Add notice about tcpdump traffic requirements 2018-08-31 11:29:36 +02:00
Andrea Cardaci
09564b427f Add apt, apt-get, mysql and smbclient 
Thanks to #20.
 2018-08-31 11:09:19 +02:00
Andrea Cardaci
5b18d9340a Fix red YAML 2018-08-31 10:17:36 +02:00
George O
cbab8b803a Add red 
Close #17.
 2018-08-27 16:27:12 +02:00
Emilio Pinna
51acc5bc9b Fix tcpdump sudo-enabled 2018-08-24 17:59:16 +01:00
Andrea Cardaci
1bff7d1525 Fix SUID for less and pg 2018-08-24 13:30:23 +02:00
Andrea Cardaci
38a5860d48 Add file-write to less 2018-08-24 12:32:06 +02:00
Andrea Cardaci
41bd75145c Fix SUID for less and pg 
Only file access is possible in that case.
 2018-08-24 12:25:57 +02:00
Andrea Cardaci
e310b1f565 Fix more YAML 2018-08-24 12:08:37 +02:00
pshem
2b16dd52e8 Add nice, cpulimit and pg 2018-08-24 11:33:15 +02:00
Emilio Pinna
e84ec807a1 Fix nmap suid-limited 2018-08-23 23:45:07 +01:00
Emilio Pinna
8fb329ca92 Fix nmap suid-limited 2018-08-23 23:44:27 +01:00
Emilio Pinna
0681eacca5 Add reverse and bind shell and file transfer functions to nmap 2018-08-23 18:29:50 +01:00
Andrea Cardaci
97c54f9b22 Fix nmap descriptions 2018-08-23 18:11:27 +02:00
Andrea Cardaci
d4b50275bb Use DATA as a placeholder for file-write operations 2018-08-20 15:00:34 +02:00
Andrea Cardaci
866ca2e404 Fix other editors file write 2018-08-20 15:00:34 +02:00
Andrea Cardaci
b4b67ff10b Fix ed file read/write 2018-08-20 15:00:34 +02:00
Emilio Pinna
0ba5df0cb9 Use temporary files in zip functions 2018-08-19 11:32:48 +01:00
Emilio Pinna
a68ef39e30 Standardize tcpdump temporary file creation 2018-08-19 11:24:13 +01:00
Emilio Pinna
14c8781f2d Fix nmap description and temporary file 2018-08-19 11:20:37 +01:00
Emilio Pinna
f34aa31334 Remove docker interactive-execute 2018-08-19 11:14:16 +01:00
Andrea Cardaci
f740b410cc Simplify zip and add suid-limited 2018-08-19 11:43:26 +02:00
Andrea Cardaci
2ff760e560 Fix and simplify tcpdump 2018-08-19 11:43:26 +02:00
Andrea Cardaci
acf29564cb Simplify rsync and add interactive execute 2018-08-19 11:43:26 +02:00
Andrea Cardaci
7822ec33e8 Add suid, description and YAML fixes to nmap 2018-08-19 11:43:26 +02:00
Andrea Cardaci
c20ade4551 Make docker disposable, use sh instead of bash and add description 2018-08-19 11:43:26 +02:00
AlessandroZ
7219385a05 add new ways 2018-08-17 17:16:09 +02:00
Andrea Cardaci
6b73dcf283 Use the portable -u option for mktemp instead of removing the file 
Close #15.
 2018-07-31 12:44:16 +02:00
Emilio Pinna
53ad35fb10 Add suid-enabled and sudo-enabled to tftp 2018-07-22 18:24:39 +01:00
Emilio Pinna
3469b03e78 Add sudo-enabled and suid-limited to socat 2018-07-22 15:49:15 +01:00
Emilio Pinna
0f422cdd6a Reorder functions in git, lua, and nc 2018-07-22 15:42:43 +01:00
Emilio Pinna
38cd886b36 Describe which functions work with netcat traditional 2018-07-22 15:35:26 +01:00
Emilio Pinna
fbd8a68cae Add suid-limited and sudo-enabled to nc 2018-07-22 15:34:05 +01:00
Emilio Pinna
4de0246992 Use double backtick for inline code 2018-07-22 15:22:03 +01:00
Emilio Pinna
b016b7b9dd Add suid-enabled and sudo-enabled to curl, dd, and wget 2018-07-22 14:30:03 +01:00
Emilio Pinna
00a06edb07 Fix lua descriptions 2018-07-22 14:12:20 +01:00
Emilio Pinna
ef92163d03 Add git 2018-07-22 14:06:54 +01:00
Emilio Pinna
bfd61e93fc Add lua 2018-07-22 12:47:57 +01:00
Emilio Pinna
94f43fb943 Fix nc download description 2018-07-22 12:47:43 +01:00
Andrea Cardaci
e1cd3aed68 Fix YAMLs according to YAMLlint 2018-07-16 15:01:50 +02:00
Andrea Cardaci
a00f689760 Improve mount 2018-07-16 13:47:09 +02:00
Andrea Cardaci
e50f44521e Improve crontab 2018-07-16 13:37:17 +02:00
kk
85b99ce89f added crontab and mount 2018-07-16 10:00:14 +02:00
Emilio Pinna
d6895f367d Reorder functions in binaries 2018-07-04 19:26:52 +01:00
Emilio Pinna
80b20b6991 Add ruby download 2018-06-17 20:16:43 +01:00
Emilio Pinna
401c469b26 Add versions requirements on PHP and ruby 2018-06-17 20:08:02 +01:00
Emilio Pinna
50ffed4210 Replace more suid-limited execution with a suid-enabled read example 2018-06-17 11:39:42 +01:00
Emilio Pinna
7fa5b1e16e Use valid Mbox file for mail 2018-06-17 11:28:23 +01:00
Emilio Pinna
06966c8cd4 Remove mail suid-limited 2018-06-17 11:27:03 +01:00
Emilio Pinna
fce5a22341 Add sudo-enabled to cut 2018-06-16 16:13:16 +01:00
Roman Mueller
659002adef Add cut 2018-06-16 14:28:28 +01:00
Andrea Cardaci
b3fc53a9d3 Remove invalid SUID execute from sed 2018-06-13 16:42:02 +02:00
Andrea Cardaci
2da69686ac Fix sed execute and file write, also enforce standards 2018-06-13 16:05:57 +02:00
Roman Mueller
3c0e0bf1e3 Add execute-interactive & file-write to sed 2018-06-13 12:01:25 +02:00
Andrea Cardaci
0d786940c4 Add tar execute-non-interactive and file-read 2018-06-13 10:35:26 +02:00
Dov Murik
69465eb338 Add expand, unexpand 2018-06-12 19:29:34 +01:00
Andrea Cardaci
4b11771fec Avoid cat in bash 2018-06-12 16:17:34 +02:00
Andrea Cardaci
3b59c85656 Fix bash file read 2018-06-11 13:12:15 +02:00
Roman Mueller
7660674537 Add file-read to curl 2018-06-10 21:59:08 +01:00
Andrea Cardaci
2696bc3cde Fix make compatibility issues 2018-06-04 20:00:09 +02:00
Emilio Pinna
7e5bcab249 Replace where_to_save with file_to_save 2018-06-04 18:53:35 +01:00
Emilio Pinna
6a747b0920 Fix PHP interactive functions 2018-06-04 18:40:46 +01:00
Andrea Cardaci
b2731c2c91 Fix make suid shell 2018-06-04 19:13:16 +02:00
Andrea Cardaci
564dbe28fa Add base64, ltrace, make, sqlite3, time 2018-06-04 19:05:55 +02:00
Andrea Cardaci
81f12399fe Add compatibility notice in make 2018-06-04 18:59:07 +02:00
Andrea Cardaci
c31a8a1b6b Simplify make 2018-06-04 18:28:58 +02:00
Andrea Cardaci
4eff8b534f Fix time description 2018-06-04 17:23:26 +02:00
Andrea Cardaci
b2a2dccc82 Add execute-interactive to sqlite3 2018-06-04 17:16:57 +02:00
Andrea Cardaci
323553f4b0 Make base64 portable 2018-06-04 14:59:57 +02:00
Andrea Cardaci
0785f116d3 Clarify echo command in rlwrap file-write 2018-06-04 13:16:24 +02:00
Andrea Cardaci
3cc3be5aa5 Use /dev/null as history for rlwrap 2018-06-04 13:09:55 +02:00
Andrea Cardaci
069e7da89d Add sudo and suid to od 2018-06-04 13:01:44 +02:00
Andrea Cardaci
467e4e875d Fix od YAML 2018-06-04 13:01:25 +02:00
Andrea Cardaci
669f8f0373 Inhibit actual locking in flock 2018-06-04 12:46:28 +02:00
Dov Murik
5fa7efbc1c Add base64, ltrace, make, sqlite3, time 2018-06-04 10:21:53 +00:00
Dov Murik
3f8a62a253 Add flock, od, rlwrap 2018-06-03 20:22:08 +00:00
Roman Mueller
6e6cbb66a7 Remove non-interactive versions 2018-06-03 13:09:03 +01:00
Roman Mueller
1e443710a2 Add ProxyCommand executions to ssh 2018-06-03 13:09:03 +01:00
Andrea Cardaci
de8d657479 Fix typo in xargs 2018-06-03 12:30:34 +02:00
Andrea Cardaci
2463f9477a Add xargs file-read even though it uses the external echo command 2018-06-03 11:51:44 +02:00
Andrea Cardaci
d14b69c12f Add comment to puppet about diff 2018-06-03 11:41:27 +02:00
Andrea Cardaci
77edd09b07 Add output to puppet execute functions 2018-06-03 10:58:39 +02:00
Andrea Cardaci
6843fe84b5 Use consistent shell variable style in puppet 2018-06-03 10:30:07 +02:00
Andrea Cardaci
42997519e1 Fix sort file-read to avoid actually sorting lines 
Thanks to @dubek.
 2018-06-03 10:01:46 +02:00