public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 14:30:07 +01:00
Code Issues Projects Releases Wiki Activity
edc8a2d03d
GTFOBins.github.io/_gtfobins
History
Syed Umar Arfeen edc8a2d03d
Adding another usage of Nmap's SUID 
I came along with this method on stackoverflow while trying to execute commands using a SUID nmap binary, though `--script` failed me but this works. Could be enough to demonstrate effect of using SUID on Nmap. 

I've yet to come up with a way to over-write the contents of the system file according to what we want, with this we can only over-write files with nmap output.

```bash
sudo touch /etc/filecantbetouched
nmap 127.0.0.1 -oN=/etc/filecantbetouched
cat /etc/filecantbetouched
```
2021-01-04 12:16:29 +05:00
..
.dir-locals.el Make Emacs treat _gtfobins Markdown files like YAML 2018-05-25 02:16:18 +02:00
apt-get.md Add alternative apt* shell technique 2019-01-21 16:28:20 +01:00
apt.md Fix apt sudo shell 2019-01-21 16:41:17 +01:00
aria2c.md Adopt new function names 2018-10-05 18:55:38 +01:00
arp.md Add arp and mtr. Thanks to https://twitter.com/insecurity_ltd/status/1087727178295529473 2019-01-30 23:07:40 +00:00
ash.md Adopt new function names 2018-10-05 18:55:38 +01:00
awk.md Adopt new function names 2018-10-05 18:55:38 +01:00
base32.md Create base32.md (#90) 2020-03-15 10:44:26 +00:00
base64.md Adopt new function names 2018-10-05 18:55:38 +01:00
basenc.md Use base64 in basenc 2020-12-20 20:59:40 +01:00
bash.md Fix bash revshell 2020-05-03 13:13:43 +02:00
bpftrace.md Improve bpftrace sudo shell 2020-01-03 14:11:37 +01:00
bundler.md Add another bundler shell example 2020-03-14 13:20:54 +01:00
busctl.md Improve busctl 2020-03-17 20:19:45 +01:00
busybox.md Remove some useless instances of export 2020-06-10 23:04:59 +02:00
byebug.md Create byebug.md 2020-03-17 20:12:46 +01:00
cancel.md Keep cancel description consistent 2018-12-31 09:40:49 +01:00
capsh.md Add capsh 2020-11-27 14:22:31 +01:00
cat.md Adopt new function names 2018-10-05 18:55:38 +01:00
check_by_ssh.md Replace command with shell in check_by_ssh 2020-12-20 19:32:15 +01:00
check_cups.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
check_log.md Fix check_log 2020-12-20 19:53:16 +01:00
check_memory.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
check_raid.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
check_ssl_cert.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
check_statusfile.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
chmod.md Make install similar to chmod 2020-12-20 21:24:10 +01:00
chown.md Adopt new function names 2018-10-05 18:55:38 +01:00
chroot.md Create chroot.md 2020-03-15 12:24:03 +01:00
cobc.md Create cobc.md 2020-03-14 11:53:05 +01:00
column.md Add note about column 2020-12-20 20:36:47 +01:00
comm.md New command: comm 2020-11-13 11:59:14 +01:00
composer.md Update composer 2020-11-08 10:39:10 +01:00
cowsay.md Add cowsay and cowthink 2020-11-12 01:02:28 +01:00
cowthink.md Add cowsay and cowthink 2020-11-12 01:02:28 +01:00
cp.md Add cp file-write 2020-03-21 19:24:30 +01:00
cpan.md Fix cpan YAML 2018-11-12 15:48:31 +01:00
cpulimit.md Adopt new function names 2018-10-05 18:55:38 +01:00
crash.md Create crash.md 2020-03-15 13:10:31 +01:00
crontab.md Adopt new function names 2018-10-05 18:55:38 +01:00
csh.md Adopt new function names 2018-10-05 18:55:38 +01:00
csplit.md New command: csplit 2020-11-13 11:59:14 +01:00
curl.md Remove useless instances of sudo -E 2020-06-10 22:53:45 +02:00
cut.md Adopt new function names 2018-10-05 18:55:38 +01:00
dash.md fix typo in shell name 2020-01-08 00:49:11 +01:00
date.md Adopt new function names 2018-10-05 18:55:38 +01:00
dd.md Remove useless instances of sudo -E 2020-06-10 22:53:45 +02:00
dialog.md Create dialog.md 2020-03-17 19:46:32 +01:00
diff.md Adopt new function names 2018-10-05 18:55:38 +01:00
dmesg.md Improve and document dmesg file read 2020-03-15 12:51:02 +01:00
dmsetup.md Add dmsetup (#31) 2018-11-10 18:39:18 +00:00
dnf.md Add dnf thanks to https://lsdsecurity.com/2019/01/linux-privilege-escalation-using-apt-get-apt-dpkg-to-abuse-sudo-nopasswd-misconfiguration/ as in #51 2019-02-02 16:15:49 +00:00
docker.md Allow to create new containers in docker file read and write 2019-07-02 16:15:39 +02:00
dpkg.md Improve dpkg 2020-04-25 19:29:59 +02:00
easy_install.md Adopt new function names 2018-10-05 18:55:38 +01:00
eb.md Add eb 2020-03-04 20:24:29 +01:00
ed.md Adopt new function names 2018-10-05 18:55:38 +01:00
emacs.md Adopt new function names 2018-10-05 18:55:38 +01:00
env.md Adopt new function names 2018-10-05 18:55:38 +01:00
eqn.md Create eqn.md 2020-03-17 20:38:21 +01:00
ex.md Fix ex shell path and remove suid 2020-12-20 20:36:47 +01:00
expand.md Adopt new function names 2018-10-05 18:55:38 +01:00
expect.md Adopt new function names 2018-10-05 18:55:38 +01:00
facter.md Use the sudo VAR=... syntax instead of using -E 2020-06-10 22:56:05 +02:00
file.md Added file -f for reading files 2020-02-09 11:44:34 +01:00
find.md Adopt new function names 2018-10-05 18:55:38 +01:00
finger.md Adopt new function names 2018-10-05 18:55:38 +01:00
flock.md Adopt new function names 2018-10-05 18:55:38 +01:00
fmt.md Add macOS file read for fmt 2020-01-08 15:50:13 +01:00
fold.md Adopt new function names 2018-10-05 18:55:38 +01:00
ftp.md Adopt new function names 2018-10-05 18:55:38 +01:00
gawk.md adding gawk, nawk, mawk 2019-08-30 15:40:42 +02:00
gcc.md Add gcc file read 2020-09-27 11:29:28 +02:00
gdb.md Add missing description to gdb sudo 2019-01-05 11:28:25 +00:00
gem.md Use rdoc instead of json in gem 2020-03-14 13:08:13 +01:00
genisoimage.md Clarify the genisoimage description 2020-03-15 15:09:25 +01:00
ghc.md Enforce conventions 2020-10-24 12:46:42 +02:00
ghci.md Enforce conventions 2020-10-24 12:46:42 +02:00
gimp.md Polish gimp description 2019-01-22 20:21:20 +00:00
git.md Add missing git shell example 2020-10-03 12:12:30 +02:00
grep.md Adopt new function names 2018-10-05 18:55:38 +01:00
gtester.md Upgrade gtester to proper shell and add SUID 2020-03-17 20:33:15 +01:00
hd.md Add hd.md 2020-03-17 14:38:20 +01:00
head.md Adopt new function names 2018-10-05 18:55:38 +01:00
hexdump.md Add description to hexdump 2020-03-17 14:38:20 +01:00
highlight.md Create highlight.md 2020-03-17 19:27:49 +01:00
hping3.md Add hping3 2020-12-30 08:47:47 +01:00
iconv.md Use latin-1 as encoding for iconv 2020-03-15 12:05:17 +01:00
iftop.md Add iftop 2019-09-28 11:41:05 +02:00
install.md Make install similar to chmod 2020-12-20 21:24:10 +01:00
ionice.md Adopt new function names 2018-10-05 18:55:38 +01:00
ip.md Update ip with sudo and SUID (#56) 2019-03-12 11:51:10 +00:00
irb.md Add irb (#44) 2019-01-03 20:17:38 +00:00
jjs.md Add jjs 2018-10-14 21:01:33 +01:00
join.md New command: join 2020-11-13 11:59:14 +01:00
journalctl.md Adopt new function names 2018-10-05 18:55:38 +01:00
jq.md Adopt new function names 2018-10-05 18:55:38 +01:00
jrunscript.md Remove some useless instances of export 2020-06-10 23:04:59 +02:00
ksh.md Adopt new function names 2018-10-05 18:55:38 +01:00
ksshell.md Create ksshell.md 2020-03-15 13:11:37 +01:00
ld.so.md Adopt new function names 2018-10-05 18:55:38 +01:00
ldconfig.md Add ldconfig 2019-08-14 13:14:57 +02:00
less.md Add alternative file read and write to less 2019-04-08 11:26:10 +02:00
logsave.md Add logsave 2019-01-15 12:22:21 +01:00
look.md Add look 2020-03-11 12:21:03 +01:00
ltrace.md Adopt new function names 2018-10-05 18:55:38 +01:00
lua.md Reword file upload/download descriptions 2019-07-29 16:41:49 +02:00
lwp-download.md Remove some useless instances of export 2020-06-10 23:04:59 +02:00
lwp-request.md Create lwp-request.md 2020-03-17 20:40:08 +01:00
mail.md Add the GNU version of mail 2019-02-19 11:27:35 +01:00
make.md Adopt new function names 2018-10-05 18:55:38 +01:00
man.md Clarify that man uses the default pager 2020-03-14 12:58:28 +01:00
mawk.md Remove network shell functions from mawk as not supported 2019-08-30 15:48:07 +02:00
more.md Remove -E option of sudo for more 2020-06-10 22:48:48 +02:00
mount.md Adopt new function names 2018-10-05 18:55:38 +01:00
mtr.md Add arp and mtr. Thanks to https://twitter.com/insecurity_ltd/status/1087727178295529473 2019-01-30 23:07:40 +00:00
mv.md Adopt new function names 2018-10-05 18:55:38 +01:00
mysql.md Add MySQL library-load 2019-03-25 19:40:48 +01:00
nano.md Update SUID in nano and pico 2019-04-16 19:11:31 +02:00
nawk.md adding gawk, nawk, mawk 2019-08-30 15:40:42 +02:00
nc.md Reword file upload/download descriptions 2019-07-29 16:41:49 +02:00
nice.md Adopt new function names 2018-10-05 18:55:38 +01:00
nl.md Adopt new function names 2018-10-05 18:55:38 +01:00
nmap.md Adding another usage of Nmap's SUID 2021-01-04 12:16:29 +05:00
node.md Adopt new function names 2018-10-05 18:55:38 +01:00
nohup.md Add (suid) shell for nohup 2020-03-15 12:18:08 +01:00
nroff.md Improve the description of nroff 2020-12-20 20:54:05 +01:00
nsenter.md Create nsenter.md 2020-03-17 19:33:32 +01:00
od.md Adopt new function names 2018-10-05 18:55:38 +01:00
openssl.md Add library load section to OpenSSL 2020-04-12 11:20:11 +02:00
paste.md New command: paste 2020-11-13 11:59:14 +01:00
pdb.md Link back python from pdb 2020-03-15 12:35:00 +01:00
perl.md Adopt new function names 2018-10-05 18:55:38 +01:00
pg.md Adopt new function names 2018-10-05 18:55:38 +01:00
php.md Fix suid in PHP 2018-10-08 20:56:51 +01:00
pic.md Add limited suid to pic 2018-11-02 23:47:20 +01:00
pico.md Update SUID in nano and pico 2019-04-16 19:11:31 +02:00
pip.md Adopt new function names 2018-10-05 18:55:38 +01:00
pkexec.md Add pkexec 2020-06-07 01:16:30 +02:00
pr.md Improve pr 2020-12-20 21:09:50 +01:00
pry.md Add limited-suid to pry 2020-03-17 20:48:08 +01:00
psql.md Fix psql shell path and remove suid 2020-12-20 20:36:55 +01:00
puppet.md Remove some useless instances of export 2020-06-10 23:04:59 +02:00
python.md Fix python SUID 2018-10-08 20:14:25 +01:00
rake.md Upgrade rake to proper interactive shell 2020-03-17 20:06:27 +01:00
readelf.md Fix SUID and document readelf 2019-01-02 13:41:10 +01:00
red.md Add sudo to red 2019-01-05 11:24:49 +00:00
redcarpet.md Fix redcarpet 2020-03-17 19:32:17 +01:00
restic.md Fix and improve restic 2020-04-12 13:22:13 +02:00
rev.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
rlogin.md Add comments to rlogin 2018-12-31 13:35:36 +01:00
rlwrap.md Adopt new function names 2018-10-05 18:55:38 +01:00
rpm.md Use os.execute instead of posix.exec in rpm 2019-02-14 12:32:18 +01:00
rpmquery.md Adopt new function names 2018-10-05 18:55:38 +01:00
rsync.md Adopt new function names 2018-10-05 18:55:38 +01:00
ruby.md Use shorten ruby file download from #44 2019-01-02 15:28:13 +00:00
run-mailcap.md Split run-mailcap into functions 2018-11-19 14:04:01 +01:00
run-parts.md Add run-parts 2018-11-12 15:45:29 +01:00
rview.md Add view and rview 2020-09-27 11:45:49 +02:00
rvim.md Fix rvim file-write description 2019-08-07 08:39:28 +01:00
scp.md Adopt new function names 2018-10-05 18:55:38 +01:00
screen.md Reword screen and use echo instead of tail with user interaction 2019-12-04 02:25:49 +01:00
script.md Fix sudo script 2019-12-31 16:46:25 +01:00
sed.md Fix sed quotes 2019-04-16 15:50:36 +02:00
service.md Add service shell 2019-03-25 19:54:58 +01:00
setarch.md Adopt new function names 2018-10-05 18:55:38 +01:00
sftp.md Adopt new function names 2018-10-05 18:55:38 +01:00
shuf.md Update shuf.md 2020-03-17 19:22:50 +01:00
slsh.md Create slsh.md 2020-11-10 20:06:53 +01:00
smbclient.md Add smbclient upload and download 2019-03-10 19:08:17 +00:00
socat.md Add note about socat shell 2020-05-13 19:41:46 +02:00
soelim.md Create soelim.md 2020-03-17 14:26:37 +01:00
sort.md Adopt new function names 2018-10-05 18:55:38 +01:00
split.md Improve split 2020-12-20 21:15:58 +01:00
sqlite3.md Adopt new function names 2018-10-05 18:55:38 +01:00
ss.md Improve the description of ss 2020-12-20 20:41:49 +01:00
ssh-keyscan.md Improve the description of ssh-keyscan 2020-12-20 20:44:24 +01:00
ssh.md Adopt new function names 2018-10-05 18:55:38 +01:00
start-stop-daemon.md Fix YAML format in start-stop-daemon 2018-11-05 16:41:04 +01:00
stdbuf.md Adopt new function names 2018-10-05 18:55:38 +01:00
strace.md Adopt new function names 2018-10-05 18:55:38 +01:00
strings.md Create strings.md 2020-03-17 14:25:54 +01:00
su.md Added entry for the su command 2020-06-17 18:18:01 +02:00
sysctl.md Fix and polish sysctl 2020-06-11 18:25:45 +02:00
systemctl.md Add systemctl example using SYSTEMD_EDITOR 2019-07-02 18:14:29 +02:00
tac.md Improve tac and add sudo and suid 2020-03-23 19:54:53 +01:00
tail.md Adopt new function names 2018-10-05 18:55:38 +01:00
tar.md Remove some useless instances of export 2020-06-10 23:04:59 +02:00
taskset.md Adopt new function names 2018-10-05 18:55:38 +01:00
tbl.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
tclsh.md Adopt new function names 2018-10-05 18:55:38 +01:00
tcpdump.md Providing user as argument using -Z 2019-09-23 04:04:05 +02:00
tee.md Adopt new function names 2018-10-05 18:55:38 +01:00
telnet.md Adopt new function names 2018-10-05 18:55:38 +01:00
tftp.md Remove useless instances of sudo -E 2020-06-10 22:53:45 +02:00
time.md Adopt new function names 2018-10-05 18:55:38 +01:00
timeout.md Adopt new function names 2018-10-05 18:55:38 +01:00
tmux.md Add tmux 2019-03-31 11:03:55 +01:00
top.md Fix and clarify sudo for top 2020-01-28 22:33:55 +01:00
troff.md Improve the description of troff 2020-12-20 20:48:00 +01:00
ul.md Adopt new function names 2018-10-05 18:55:38 +01:00
unexpand.md Adopt new function names 2018-10-05 18:55:38 +01:00
uniq.md Adopt new function names 2018-10-05 18:55:38 +01:00
unshare.md Adopt new function names 2018-10-05 18:55:38 +01:00
update-alternatives.md Improve update-alternatives 2020-11-17 18:54:53 +01:00
uudecode.md Add uudecode 2020-03-15 11:25:35 +00:00
uuencode.md Create uuencode.md (#92) 2020-03-15 10:46:04 +00:00
valgrind.md Create valgrind.md 2020-03-17 19:28:20 +01:00
vi.md Skim wrong functions from original vi 2018-12-18 14:04:05 +01:00
view.md Add view and rview 2020-09-27 11:45:49 +02:00
vim.md Reword file upload/download descriptions 2019-07-29 16:41:49 +02:00
watch.md Adopt new function names 2018-10-05 18:55:38 +01:00
wget.md Remove some useless instances of export 2020-06-10 23:04:59 +02:00
whois.md Adopt new function names 2018-10-05 18:55:38 +01:00
wish.md Adopt new function names 2018-10-05 18:55:38 +01:00
xargs.md Adopt new function names 2018-10-05 18:55:38 +01:00
xmodmap.md Syntax cleanup, removed some non-working SUID entries 2020-11-13 11:56:48 +01:00
xxd.md Adopt new function names 2018-10-05 18:55:38 +01:00
xz.md Add XZ 2020-05-25 13:43:36 +02:00
yelp.md Improve and document yelp 2020-03-14 12:45:57 +01:00
yum.md Add file-download to yum 2020-10-02 20:22:06 +02:00
zip.md Adopt new function names 2018-10-05 18:55:38 +01:00
zsh.md Adopt new function names 2018-10-05 18:55:38 +01:00
zsoelim.md Document and fix zsoelim 2020-03-15 13:33:15 +01:00
zypper.md Fix sudo zypper 2020-06-10 22:54:20 +02:00