public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 22:40:10 +01:00
Code Issues Projects Releases Wiki Activity
2b16dd52e8
GTFOBins.github.io/_gtfobins/busybox.md
Andrea Cardaci d4b50275bb Use DATA as a placeholder for file-write operations
2018-08-20 15:00:34 +02:00

768 B
Raw Blame History

description functions
BusyBox may contain many UNIX utilities, run `busybox --list-full` to check what GTFBins binaries are supported. Here some example.
execute-interactive upload file-write file-read suid-enabled sudo-enabled
code
busybox sh
description code
Serve files in the local folder running an HTTP server. export LPORT=12345 busybox httpd -f -p $LPORT -h .
code
LFILE=file_to_write busybox sh -c 'echo "DATA" > $LFILE'
code
LFILE=file_to_read ./busybox cat "$LFILE"
description code
It may drop the SUID privileges depending on the compilation flags and the runtime configuration. ./busybox sh
code
sudo busybox sh