1
0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-11-08 15:59:17 +01:00
Commit Graph

16 Commits

Author SHA1 Message Date
James Spadaro
cd05b58e70
Add LocalCommand option to SSH
SSH has a LocalCommand option that will run a given command on the client machine after a successful connection.  It is generally disabled, but can be enabled on the command line with "-oPermitLocalCommand=yes".  This is useful for bypassing restricted shells.

Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
2022-05-01 11:07:53 +02:00
Emilio Pinna
dd337b5ddf Adopt new function names 2018-10-05 18:55:38 +01:00
Andrea Cardaci
8eaf595fe6 Make interactive execute whenever possible
Here the trick is to restore those file descriptors (0, 1, 2) that have been
redirected (`dup2`) by the parent process.

First we need to determine which one has been redirected, for example by looking
at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0,
1 or 2 respectively, where `x` is any file descriptor number that points to the
TTY.

It may happen that no file descriptor is unchanged, in that case we can use
`tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty)
2018-09-07 01:11:06 +02:00
Andrea Cardaci
65c3d3409f Fix ssh execute 2018-09-06 20:40:36 +02:00
Andrea Cardaci
e1cd3aed68 Fix YAMLs according to YAMLlint 2018-07-16 15:01:50 +02:00
Emilio Pinna
d6895f367d Reorder functions in binaries 2018-07-04 19:26:52 +01:00
Emilio Pinna
7e5bcab249 Replace where_to_save with file_to_save 2018-06-04 18:53:35 +01:00
Roman Mueller
6e6cbb66a7 Remove non-interactive versions 2018-06-03 13:09:03 +01:00
Roman Mueller
1e443710a2 Add ProxyCommand executions to ssh 2018-06-03 13:09:03 +01:00
Emilio Pinna
1b5f2aedae Rephrase ssh read 2018-05-30 19:07:49 +01:00
Andrea Cardaci
481cd24a84 Fix ssh file-read 2018-05-29 17:11:36 +02:00
Paul Taylor
765d2d1aa4 Add file-read to ssh 2018-05-29 14:43:57 +02:00
Andrea Cardaci
358628c2f2 Remove hardcoded instances of bash 2018-05-28 17:48:26 +02:00
Andrea Cardaci
36dcf7a836 Reorganize function names 2018-05-25 15:30:02 +02:00
Emilio Pinna
b857c98f92 Use target.com and attacker.com 2018-05-24 21:05:11 +01:00
Emilio Pinna
b81e57005a First commit 2018-05-21 20:14:41 +01:00