mirror/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-11-08 07:49:17 +01:00
Code Issues
ec7633d6bc
GTFOBins.github.io/_gtfobins/sg.md

20 lines
637 B
Markdown
Raw Normal View History

Create sg.md Adding the "sg" binary which allows command execution under a "different" group ID. However, it can be used to break out of restricted environments by using a user's own group ID.
2021-02-16 04:49:13 +01:00
---
functions:
Update sg.md
2021-02-16 04:57:15 +01:00
shell:
Create sg.md Adding the "sg" binary which allows command execution under a "different" group ID. However, it can be used to break out of restricted environments by using a user's own group ID.
2021-02-16 04:49:13 +01:00
- description: Commands can be run if the current user's group is specified, therefore no additional permissions are needed.
code: |
GROUPNAME=users
sg $GROUPNAME -c "/bin/sh"
command:
- description: Commands can be run if the current user's group is specified, therefore no additional permissions are needed.
code: |
Update sg.md
2021-02-16 04:57:15 +01:00
COMMAND=whoami
Create sg.md Adding the "sg" binary which allows command execution under a "different" group ID. However, it can be used to break out of restricted environments by using a user's own group ID.
2021-02-16 04:49:13 +01:00
GROUPNAME=users
sg $GROUPNAME -c $COMMAND
sudo:
- description: Any group can be specified as the user will have root permissions.
code: |
GROUPNAME=users
sudo sg $GROUPNAME -c "/bin/sh"
---
Copy Permalink