mirror/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-11-08 07:49:17 +01:00
Code Issues
648 Commits 1 Branch 0 Tags 2.7 MiB
28cc7ff7da
Commit Graph

648 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Shikata
28cc7ff7da Add SUID [file read] category to sqlite3 2021-01-12 13:57:34 +02:00
Shikata
ae8271292a Add SUID [file read] category to lua 2021-01-12 13:50:43 +02:00
Shikata
47698d0cfb Add SUID [file read] category to ed 2021-01-12 13:44:19 +02:00
Shikata
fd719bb4b6 Add SUID category to awk 2021-01-12 13:39:52 +02:00
Shikata
a48303c2b9 Remove redundant sudo from SUID category in nohup 2021-01-11 16:18:18 +02:00
Shikata
211edf746b Switch SUID to Limited SUID in aria2c 2021-01-11 13:45:21 +02:00
Shikata
c09b95053f Fixed order of Limited SUID category in lwp-request 2021-01-11 13:02:54 +02:00
Shikata
05a9ae111b Switch SUID to Limited SUID in hping3 2021-01-11 13:02:11 +02:00
Shikata
9d1b86e9d3 Switch SUID to Limited SUID in lwp-request 2021-01-11 12:56:13 +02:00
Shikata
c4f93b87d5 Remove redundant lua -e from File Write and File Read categories in nmap 2021-01-11 12:37:37 +02:00
Shikata
db40142ea7 Remove redundant sudo from SUID category 2021-01-11 12:31:54 +02:00
Andrea Cardaci
bb4050810e Fix rpm[query] SUID 2021-01-10 18:27:30 +01:00
Andrea Cardaci
33fb39a183 Fix wrong nano and pico SUID 2021-01-10 18:16:30 +01:00
ritiksahni
01d4de40d2
Add dig 2021-01-10 12:31:51 +01:00
ritiksahni
9069b0c903
Add exiftool 2021-01-09 15:03:35 +01:00
Andrea Cardaci
89b421863f
Add nmap file-write 2021-01-04 09:11:03 +01:00
Andrea Cardaci
5b2d89b99a Fix nmap SUID file-write 2021-01-04 09:05:21 +01:00
Syed Umar Arfeen
edc8a2d03d
Adding another usage of Nmap's SUID 
I came along with this method on stackoverflow while trying to execute commands using a SUID nmap binary, though `--script` failed me but this works. Could be enough to demonstrate effect of using SUID on Nmap. 

I've yet to come up with a way to over-write the contents of the system file according to what we want, with this we can only over-write files with nmap output.

```bash
sudo touch /etc/filecantbetouched
nmap 127.0.0.1 -oN=/etc/filecantbetouched
cat /etc/filecantbetouched
```
 2021-01-04 12:16:29 +05:00
makikvues
1c07880178
Add hping3 2020-12-30 08:47:47 +01:00
Andrea Cardaci
2746e78a44 Use the more clean install command to create example SUIDs 2020-12-20 22:20:45 +01:00
Andrea Cardaci
65857d486b
Merge pull request #147 from mindfuckup/master 2020-12-20 21:31:05 +01:00
Andrea Cardaci
c80e83c3c5 Make install similar to chmod 2020-12-20 21:24:10 +01:00
Andrea Cardaci
fbe4b42890 Improve split 2020-12-20 21:15:58 +01:00
Andrea Cardaci
2475ea0a5a Improve pr 2020-12-20 21:09:50 +01:00
Andrea Cardaci
c6502e8ddc Use base64 in basenc 2020-12-20 20:59:40 +01:00
Andrea Cardaci
7cfac08921 Improve the description of nroff 2020-12-20 20:54:05 +01:00
Andrea Cardaci
b05a84474b Improve the description of troff 2020-12-20 20:48:00 +01:00
Andrea Cardaci
dd16d538ce Improve the description of ssh-keyscan 2020-12-20 20:44:24 +01:00
Andrea Cardaci
54c20a1349 Improve the description of ss 2020-12-20 20:41:49 +01:00
Andrea Cardaci
5102eccdfc Fix psql shell path and remove suid 2020-12-20 20:36:55 +01:00
Andrea Cardaci
6a6485c44b Fix ex shell path and remove suid 2020-12-20 20:36:47 +01:00
Andrea Cardaci
dc3de20e84 Add note about column 2020-12-20 20:36:47 +01:00
Andrea Cardaci
4b2100bfae Fix check_log 2020-12-20 19:53:16 +01:00
Andrea Cardaci
ee8cce63f9 Replace command with shell in check_by_ssh 2020-12-20 19:32:15 +01:00
Andrea Cardaci
4cc9e40e3f Add yet another clarification 2020-12-05 19:31:46 +01:00
Andrea Cardaci
31af1e879f Avoid the "exploit" verb to reduce confusion 2020-12-05 17:52:03 +01:00
Xiaoyin Liu
12b8ceee39 Use HTTPS for the link yaml.org 
http://yaml.org/ redirects to https://yaml.org/. For visitors privacy and security, let's use HTTPS for this link.
 2020-11-29 12:59:57 +01:00
Yash Saxena
a38ccf2621
Add capsh 2020-11-27 14:22:31 +01:00
Andrea Cardaci
22899a5159 Improve update-alternatives 2020-11-17 18:54:53 +01:00
Michael Gisbers
e212f23455 Create update-alternatives.md 
Use update-alternatives with sudo to replace system binaries
 2020-11-17 18:54:53 +01:00
Emanuel Duss
286775860a Fixed syntax error 2020-11-13 12:46:01 +01:00
Emanuel Duss
de10e4761e Added missing shell file 2020-11-13 12:09:04 +01:00
Emanuel Duss
cb7cb672f2 New command: split 2020-11-13 11:59:14 +01:00
Emanuel Duss
c88e461484 New command: pr 2020-11-13 11:59:14 +01:00
Emanuel Duss
28b67bdfd5 New command: paste 2020-11-13 11:59:14 +01:00
Emanuel Duss
9e593b6ac0 New command: join 2020-11-13 11:59:14 +01:00
Emanuel Duss
146b146cd3 New command: install 2020-11-13 11:59:14 +01:00
Emanuel Duss
5a3e672d23 New command: csplit 2020-11-13 11:59:14 +01:00
Emanuel Duss
55b7296d8e New command: comm 2020-11-13 11:59:14 +01:00
Emanuel Duss
2ee9d7a934 New command: basenc 2020-11-13 11:58:00 +01:00