GTFOBins.github.io/busybox.md at d4b50275bb026af2205e8db0db4ddfc990db90cf

mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-11-08 07:49:17 +01:00

Andrea Cardaci d4b50275bb Use DATA as a placeholder for file-write operations

2018-08-20 15:00:34 +02:00

description

functions

BusyBox may contain many UNIX utilities, run `busybox --list-full` to check what GTFBins binaries are supported. Here some example.

execute-interactive

upload

file-write

file-read

suid-enabled

sudo-enabled

code
busybox sh

description	code
Serve files in the local folder running an HTTP server.	export LPORT=12345 busybox httpd -f -p $LPORT -h .

code
LFILE=file_to_write busybox sh -c 'echo "DATA" > $LFILE'

code
LFILE=file_to_read ./busybox cat "$LFILE"

description	code
It may drop the SUID privileges depending on the compilation flags and the runtime configuration.	./busybox sh

code
sudo busybox sh