Commit Graph

224 Commits

Author SHA1 Message Date
Emilio Pinna
ce111369f3 Try add python payloads to pip 2018-09-27 21:34:49 +01:00
Andrea Cardaci
0db7fe5f32 Fix pip to work in both Linux and macOS 2018-09-27 12:58:29 +02:00
Emilio Pinna
3c59b1c2fc Add python functions to gdb 2018-09-25 22:44:12 +01:00
Emilio Pinna
12aa95cf2f Fix pip description 2018-09-25 22:16:12 +01:00
Emilio Pinna
0ec8e7d99d Fix gdb description 2018-09-25 22:02:25 +01:00
Emilio Pinna
1222c37802 Merge python2 and python3 2018-09-25 21:41:31 +01:00
Emilio Pinna
ebb9fd00be Fix python3 upload 2018-09-25 20:37:38 +01:00
Emilio Pinna
d3659b5cc6 Fix python2 upload 2018-09-25 20:37:38 +01:00
Andrea Cardaci
689e00461d Get rid of base64 for curl and wget and make descriptions similar
Close #24.
2018-09-25 19:56:27 +02:00
Roman Mueller
9bac306503 Add history file read/write to bash
Close #21.
2018-09-13 18:51:28 +02:00
Andrea Cardaci
b10791a840 Add download to finger 2018-09-13 15:42:45 +02:00
Andrea Cardaci
2e477b25de Add the capabilities-enabled function
This exploits `setcap` to persist root privileges on Linux.
2018-09-13 14:49:51 +02:00
Andrea Cardaci
aed737131c Add capabilities to gdb 2018-09-13 14:48:40 +02:00
Emilio Pinna
3125617475 Add finger 2018-09-12 22:35:41 +01:00
Emilio Pinna
7314987800 Add capabilities to node 2018-09-12 22:02:05 +01:00
Emilio Pinna
c7375411b7 Add capabilities to perl, php, python3, and ruby 2018-09-12 21:57:04 +01:00
Emilio Pinna
e72d7e3d19 Reorder functions 2018-09-12 21:56:42 +01:00
Emilio Pinna
1afd9ec9ec Drafting capabilities 2018-09-12 21:29:53 +01:00
Andrea Cardaci
2e6968e883 Clarify aria2c --allow-overwrite
As discussed in #22.
2018-09-07 13:46:22 +02:00
Andrea Cardaci
e5d5f2e2c6 Clarify tcpdump subprocess 2018-09-07 13:33:30 +02:00
Andrea Cardaci
17c3e974a7 Add a full local version of aria2c and add --allow-overwrite
Close #22
2018-09-07 13:30:55 +02:00
HugoDelval
65b762ca80 Add aria2c
Taken from https://github.com/InsecurityAsso/inshack-2018/blob/master/web/curler/exploit/exploit
2018-09-07 13:30:10 +02:00
Andrea Cardaci
8eaf595fe6 Make interactive execute whenever possible
Here the trick is to restore those file descriptors (0, 1, 2) that have been
redirected (`dup2`) by the parent process.

First we need to determine which one has been redirected, for example by looking
at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0,
1 or 2 respectively, where `x` is any file descriptor number that points to the
TTY.

It may happen that no file descriptor is unchanged, in that case we can use
`tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty)
2018-09-07 01:11:06 +02:00
Andrea Cardaci
5b79154cf1 Avoid output file for tcpdump 2018-09-07 00:29:58 +02:00
Andrea Cardaci
ab62d024b1 Make xargs execute-interactive 2018-09-06 23:35:27 +02:00
Andrea Cardaci
7c0fa85a66 Make nano/pico execute-interactive by using exec 2018-09-06 21:36:20 +02:00
Andrea Cardaci
65c3d3409f Fix ssh execute 2018-09-06 20:40:36 +02:00
Andrea Cardaci
14ea39d22f Fix description long lines 2018-09-06 19:18:22 +02:00
Andrea Cardaci
d180391d7e Fix Python link in pip 2018-09-06 19:18:12 +02:00
Andrea Cardaci
7d9465bd6a Add pip
As suggested by #20.
2018-09-06 18:46:22 +02:00
Andrea Cardaci
9c96140f1d Add date
Thanks to #20.
2018-09-06 17:08:01 +02:00
Emilio Pinna
cb695abfa6 Add chmod and chown as suggested in #20 2018-09-05 17:59:07 +01:00
Emilio Pinna
f2ab6a6283 Remove file-read and file-write from cp and mv 2018-09-05 17:38:32 +01:00
Andrea Cardaci
aab8e783ec Add facter
Thanks to #20.
2018-09-04 13:42:37 +02:00
Emilio Pinna
d5f546b67d Polish cp and mv descriptions 2018-09-03 21:40:09 +01:00
Emilio Pinna
08a82c913a Add mv as suggested in #20 2018-09-03 21:38:22 +01:00
Emilio Pinna
508a06c14a Add cp as suggested in #20 2018-09-03 21:33:24 +01:00
Andrea Cardaci
8f4b085807 Fix shuf YAML 2018-08-31 15:51:14 +02:00
Andrea Cardaci
6bfc58daab Add notice about tcpdump traffic requirements 2018-08-31 11:29:36 +02:00
Andrea Cardaci
09564b427f Add apt, apt-get, mysql and smbclient
Thanks to #20.
2018-08-31 11:09:19 +02:00
Andrea Cardaci
5b18d9340a Fix red YAML 2018-08-31 10:17:36 +02:00
George O
cbab8b803a Add red
Close #17.
2018-08-27 16:27:12 +02:00
Emilio Pinna
51acc5bc9b Fix tcpdump sudo-enabled 2018-08-24 17:59:16 +01:00
Andrea Cardaci
1bff7d1525 Fix SUID for less and pg 2018-08-24 13:30:23 +02:00
Andrea Cardaci
38a5860d48 Add file-write to less 2018-08-24 12:32:06 +02:00
Andrea Cardaci
41bd75145c Fix SUID for less and pg
Only file access is possible in that case.
2018-08-24 12:25:57 +02:00
Andrea Cardaci
e310b1f565 Fix more YAML 2018-08-24 12:08:37 +02:00
pshem
2b16dd52e8 Add nice, cpulimit and pg 2018-08-24 11:33:15 +02:00
Emilio Pinna
e84ec807a1 Fix nmap suid-limited 2018-08-23 23:45:07 +01:00
Emilio Pinna
8fb329ca92 Fix nmap suid-limited 2018-08-23 23:44:27 +01:00