public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-26 06:49:44 +01:00
Code Issues Projects Releases Wiki Activity
427 Commits 1 Branch 0 Tags 7 MiB
dcbf66329a
Commit Graph

343 Commits

Author SHA1 Message Date
Dominic Breuker
dcbf66329a Add file read and write as per #64 (temporary solution) 2019-07-02 15:53:28 +02:00
Andrea Cardaci
40ecb11b2e Simplify the docker example by using chroot 
Also make it available for non-root users.

The previous SUID example had the problem that the loaders between host and
containers must match, for example, copying `sh` from alpine to debian doesn't
directly work.
 2019-07-02 15:47:29 +02:00
Andrea Cardaci
f4a3fc9af3 Add notice about Git sudo capabilities 2019-06-23 17:24:38 +02:00
Syed Umar Arfeen
b8493f916d Increase the probability that the pager is called by Git 
`git help config` produces a much longer output, hopefully longer than the
terminal window.

Close #62
 2019-06-23 17:17:59 +02:00
Andrea Cardaci
ac68a5864a Update SUID in nano and pico 2019-04-16 19:11:31 +02:00
Andrea Cardaci
f7baa8aee6 Fix sed quotes 2019-04-16 15:50:36 +02:00
Andrea Cardaci
f088906051 Fix sed file write 2019-04-16 15:49:49 +02:00
Rich Mirch
f79b10a5f8 Add systemctl sudo shell usingpager 2019-04-16 15:41:32 +02:00
Rich Mirch
20607b9b3c Add sed shell alternative example 2019-04-16 15:37:14 +02:00
Andrea Cardaci
3bc83dcbde Add alternative file read and write to less 2019-04-08 11:26:10 +02:00
Rich Mirch
3702ec4d53 Update sudo yum by loading a custom plugin (#58) 2019-04-06 21:51:33 +01:00
Emilio
b9a262c600 Fix nano shell, suid, and sudo 2019-03-31 12:44:50 +01:00
Emilio
c20ccf4af2 Fix pico shell, suid, and sudo 2019-03-31 12:43:08 +01:00
Emilio
75eff93c50 Improve pico shell, suid, and sudo 2019-03-31 12:19:11 +01:00
Emilio
260b024c74 Add tmux 2019-03-31 11:03:55 +01:00
Emilio
08f5b33651 Add functions with default pager in git 2019-03-31 11:03:34 +01:00
Andrea Cardaci
336abc79bb Add service shell 2019-03-25 19:54:58 +01:00
Andrea Cardaci
13ab3596bb Add MySQL library-load 2019-03-25 19:40:48 +01:00
Emilio
73b18859d5 Add screen 2019-03-12 17:44:03 +00:00
S. Sauvin
383db60b02 Update ip with sudo and SUID (#56) 
* Update ip with sudo and SUID
 2019-03-12 11:51:10 +00:00
Emilio
fec4b52281 Add smbclient upload and download 2019-03-10 19:08:17 +00:00
Andrea Cardaci
58e517563c Add suid/sudo accordingly to openssl 2019-03-06 14:08:42 +01:00
Andrea Cardaci
60af774288 Add -no_ign_eof to exit nicely when possible to openssl 2019-03-06 13:54:16 +01:00
Andrea Cardaci
e1a02558ec Refactor openssl descriptions 2019-03-06 13:53:52 +01:00
Roman Mueller
cdb4576c85 Add reverse-shell, file-upload and file-download. 2019-03-05 09:37:52 +01:00
the-remmer
8c03983ab8 Add zypper 
Close #52.
 2019-02-22 12:51:30 +01:00
Jonathan Siegel
dd9f4269ed Add the GNU version of mail 
Close #54.
 2019-02-19 11:27:35 +01:00
Emilio Pinna
2650be9c68 Add new shell and sudo payload to nano 
Thanks to https://twitter.com/TheKnapsy/status/1093137518780854273.
 2019-02-15 20:10:32 +00:00
brian
3bd955e8cc Use os.execute instead of posix.exec in rpm 
From rpm versions 4.9.0 and on, posix.exec() will return an error unless called
from a child process created with posix.fork(). os.execute() may be used
instead.

This change is documented in these two resources:

- http://rpm.org/user_doc/lua.html
- https://rpm-packaging-guide.github.io/

Close #53.
 2019-02-14 12:32:18 +01:00
Emilio
52a2f4cdc7 Add Lua payloads to rvim 2019-02-03 10:21:45 +00:00
Emilio
d111e78b45 Add Lua payloads to vim 2019-02-03 10:15:53 +00:00
Emilio
9dc5fa2128 Add dnf thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 16:15:49 +00:00
Emilio
a0674eb8f0 Add other sudo to rpm thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 15:54:57 +00:00
Emilio
b330297943 Add yum thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 15:46:01 +00:00
Emilio
7a3ae6e05a Add dpkg thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 15:13:28 +00:00
Emilio
3166a321c0 Add script 2019-02-02 10:02:14 +00:00
Emilio Pinna
fc59ef546f Add arp and mtr. Thanks to https://twitter.com/insecurity_ltd/status/1087727178295529473 2019-01-30 23:07:40 +00:00
Andrea Cardaci
d0464d7ce8 Drop useless echo indentation 2019-01-29 14:25:16 +01:00
bstapes
a2886b643d Add systemctl 2019-01-29 14:12:29 +01:00
Andrea Cardaci
0109792b7e Clarify bash reverse shell 2019-01-25 16:41:15 +01:00
in.security
3a53c6339e Add ip 2019-01-25 16:40:42 +01:00
Emilio Pinna
1719c4ffda Polish gimp description 2019-01-22 20:21:20 +00:00
Emilio Pinna
8782ccb96b Fix gimp description 2019-01-22 20:19:39 +00:00
Emilio Pinna
ee7b68232f Add gimp description 2019-01-22 20:17:00 +00:00
Emilio Pinna
69b8eb1056 Fix gimp file write 2019-01-22 20:13:34 +00:00
Emilio
9180d550e7 Add gimp thanks to https://twitter.com/Geluchat/status/1083743529388687361 2019-01-21 20:53:48 +00:00
Andrea Cardaci
bab4250775 Fix apt sudo shell 2019-01-21 16:41:17 +01:00
Andrea Cardaci
21f760676c Add alternative apt* shell technique 
Thanks to
https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/

Also related to #38.
 2019-01-21 16:28:20 +01:00
Andrea Cardaci
4fdaada820 Fix apt* shell 
The Bash process substitution doesn't work (anymore?).
 2019-01-21 15:40:28 +01:00
Andrea Cardaci
f6b29ce958 Mention the SPELL environment variable in nano 2019-01-21 14:07:14 +01:00