c1ea5f2b41
Create rlogin.md
2018-12-31 13:35:36 +01:00
bbfcb5b633
Keep cancel description consistent
2018-12-31 09:40:49 +01:00
63147892c4
Create cancel.md ( #43 )
...
* Add cancel.md
2018-12-31 09:38:20 +01:00
809b60ef97
Add nmap interactive mode
2018-12-24 18:39:24 +01:00
e404981c2e
Add reverse-shell, file-upload, file-download, library-load, and capabilities to rvim
2018-12-18 15:19:41 +01:00
6befd62430
Add reverse-shell, file-upload, file-download, library-load, and capabilities to vim
2018-12-18 15:11:03 +01:00
d3ef67aa3a
Remove suid from vim
2018-12-18 14:28:09 +01:00
4910c32409
Skim wrong functions from original vi
2018-12-18 14:04:05 +01:00
9432a6ce3c
Add Python 3 comment in vim and rvim
2018-12-18 13:31:22 +01:00
cda1654809
Add openssl-enc commands ( #41 )
2018-12-17 14:46:30 +01:00
a659ed5d5f
Add file
2018-12-12 18:08:22 +01:00
32b113b003
Fix and add SUID to other vi
...
Related to #39 .
2018-12-03 16:00:11 +01:00
e066c22c1f
Fix YAML format in vi
2018-12-03 16:00:01 +01:00
ed9363fe2d
Fix broken shells in vi
...
Related to #39 .
2018-12-03 15:59:37 +01:00
279381cf3c
Polish rvim, vi, and vim
2018-12-03 13:15:57 +00:00
bd0cad0433
Add vi(m) commands ( #39 )
2018-12-03 13:06:41 +00:00
46fd726c5a
Improve 'apt-* install' entries
...
Improve description, enforce standards and make sure that the package will not
be installed.
Related #38 .
2018-11-29 14:25:49 +01:00
736f3482d3
Add apt(-get) entries
2018-11-29 13:51:39 +01:00
2d3071ef55
Typo: LFILE -> $LFILE (DD command)
2018-11-20 13:40:19 +01:00
f111f3e261
Split run-mailcap into functions
...
Close #34 .
2018-11-19 14:04:01 +01:00
892949d4af
Add run-mailcap
2018-11-19 13:30:43 +01:00
df1efb0437
Fix cpan YAML
2018-11-12 15:48:31 +01:00
d5405933d1
Add run-parts
2018-11-12 15:45:29 +01:00
3cbfa05169
Add dmesg
...
Close #32 .
2018-11-12 15:11:50 +01:00
23dae5406e
Minor fixes on cpan
2018-11-12 15:11:50 +01:00
a448ed5c25
Add dmsetup ( #31 )
...
* Add dmsetup
* fixes
2018-11-10 18:39:18 +00:00
27c1c56577
Polish cpan
2018-11-08 20:01:40 +00:00
754e5e0f95
variable fix
2018-11-08 20:00:23 +00:00
f6d6019515
added environment variables
2018-11-08 20:00:23 +00:00
b78d64c236
made fixes, thanks to egre55
2018-11-08 20:00:23 +00:00
e600a4e610
indentation fixes
2018-11-08 20:00:23 +00:00
b3a6e93b78
Add cpan
2018-11-08 20:00:23 +00:00
66844f9cc4
Fix YAML format in start-stop-daemon
2018-11-05 16:41:04 +01:00
86e249e812
Add start-stop-daemon
2018-11-05 16:34:57 +01:00
ae79cfa550
Add limited suid to pic
...
Related to #28 .
2018-11-02 23:47:20 +01:00
0b62b20891
Add pic
2018-11-02 23:45:58 +01:00
3cd9494b9b
Remove limited-suid from man
2018-10-23 13:55:21 +02:00
0c8a06246b
Add --to-command interactive shell to tar
...
Close #27
2018-10-21 12:13:17 +02:00
a7818d5f16
Promote tar command to interactive shell
2018-10-21 12:13:17 +02:00
fdda727eb1
Add jjs
2018-10-14 21:01:33 +01:00
7ad0233b33
Add description to jrunscript reverse-shell
2018-10-14 21:01:24 +01:00
46e293e444
Describe jrunscript suid limitations
2018-10-13 13:36:24 +01:00
26151d0c44
Add jrunscript
2018-10-12 18:39:39 +01:00
d7d463ee0c
Add missing SUID in gdb
2018-10-08 22:51:52 +01:00
2377be5a55
Fix suid in PHP
2018-10-08 20:56:51 +01:00
f14e511218
Fix python SUID
2018-10-08 20:14:25 +01:00
dd337b5ddf
Adopt new function names
2018-10-05 18:55:38 +01:00
1dfb03b013
Add description about grep flavors
...
Related to #26 .
2018-10-03 14:44:55 +02:00
0bca156294
Add grep
2018-10-03 14:22:27 +02:00
fbb0ccefa4
Add info about pager in journalctl
...
Close #25 .
2018-10-02 22:52:08 +02:00
7d3a6ddd9d
Add journalctl
2018-10-02 22:52:05 +02:00
9514d41a80
Remove capabilities-enabled from pip
2018-09-29 10:54:33 +01:00
a156e10996
Use LFILE in easy_install and pip file-write function
2018-09-29 10:51:00 +01:00
f8dab26569
Rephrase easy_install descriptions
2018-09-29 10:47:19 +01:00
9dc6a93e5b
Add download to easy_install
2018-09-29 10:46:03 +01:00
c2224a6b49
Add easy_install file-write
2018-09-28 17:57:23 +01:00
0e639583d6
Add easy_install
2018-09-27 22:53:55 +01:00
5087fa15ef
Remove pip description
2018-09-27 22:00:56 +01:00
be7f7b87a0
Remove capabilities-enabled and sudo-enabled from pip
2018-09-27 21:54:50 +01:00
1321a330a5
Fix pip setcap
2018-09-27 21:43:28 +01:00
ce111369f3
Try add python payloads to pip
2018-09-27 21:34:49 +01:00
0db7fe5f32
Fix pip to work in both Linux and macOS
2018-09-27 12:58:29 +02:00
3c59b1c2fc
Add python functions to gdb
2018-09-25 22:44:12 +01:00
12aa95cf2f
Fix pip description
2018-09-25 22:16:12 +01:00
0ec8e7d99d
Fix gdb description
2018-09-25 22:02:25 +01:00
1222c37802
Merge python2 and python3
2018-09-25 21:41:31 +01:00
ebb9fd00be
Fix python3 upload
2018-09-25 20:37:38 +01:00
d3659b5cc6
Fix python2 upload
2018-09-25 20:37:38 +01:00
689e00461d
Get rid of base64 for curl and wget and make descriptions similar
...
Close #24 .
2018-09-25 19:56:27 +02:00
9bac306503
Add history file read/write to bash
...
Close #21 .
2018-09-13 18:51:28 +02:00
b10791a840
Add download to finger
2018-09-13 15:42:45 +02:00
2e477b25de
Add the capabilities-enabled function
...
This exploits `setcap` to persist root privileges on Linux.
2018-09-13 14:49:51 +02:00
aed737131c
Add capabilities to gdb
2018-09-13 14:48:40 +02:00
3125617475
Add finger
2018-09-12 22:35:41 +01:00
7314987800
Add capabilities to node
2018-09-12 22:02:05 +01:00
c7375411b7
Add capabilities to perl, php, python3, and ruby
2018-09-12 21:57:04 +01:00
e72d7e3d19
Reorder functions
2018-09-12 21:56:42 +01:00
1afd9ec9ec
Drafting capabilities
2018-09-12 21:29:53 +01:00
2e6968e883
Clarify aria2c --allow-overwrite
...
As discussed in #22 .
2018-09-07 13:46:22 +02:00
e5d5f2e2c6
Clarify tcpdump subprocess
2018-09-07 13:33:30 +02:00
17c3e974a7
Add a full local version of aria2c and add --allow-overwrite
...
Close #22
2018-09-07 13:30:55 +02:00
65b762ca80
Add aria2c
...
Taken from https://github.com/InsecurityAsso/inshack-2018/blob/master/web/curler/exploit/exploit
2018-09-07 13:30:10 +02:00
8eaf595fe6
Make interactive execute whenever possible
...
Here the trick is to restore those file descriptors (0, 1, 2) that have been
redirected (`dup2`) by the parent process.
First we need to determine which one has been redirected, for example by looking
at `ls -l /proc/$$/fd/`. Then we can use `0<&x`, `1>&x` or `2>&x` to restore 0,
1 or 2 respectively, where `x` is any file descriptor number that points to the
TTY.
It may happen that no file descriptor is unchanged, in that case we can use
`tty` to perform the redirection: sh <$(tty) >$(tty) 2>$(tty)
2018-09-07 01:11:06 +02:00
5b79154cf1
Avoid output file for tcpdump
2018-09-07 00:29:58 +02:00
ab62d024b1
Make xargs execute-interactive
2018-09-06 23:35:27 +02:00
7c0fa85a66
Make nano/pico execute-interactive by using exec
2018-09-06 21:36:20 +02:00
65c3d3409f
Fix ssh execute
2018-09-06 20:40:36 +02:00
14ea39d22f
Fix description long lines
2018-09-06 19:18:22 +02:00
d180391d7e
Fix Python link in pip
2018-09-06 19:18:12 +02:00
7d9465bd6a
Add pip
...
As suggested by #20 .
2018-09-06 18:46:22 +02:00
9c96140f1d
Add date
...
Thanks to #20 .
2018-09-06 17:08:01 +02:00
cb695abfa6
Add chmod and chown as suggested in #20
2018-09-05 17:59:07 +01:00
f2ab6a6283
Remove file-read and file-write from cp and mv
2018-09-05 17:38:32 +01:00
aab8e783ec
Add facter
...
Thanks to #20 .
2018-09-04 13:42:37 +02:00
d5f546b67d
Polish cp and mv descriptions
2018-09-03 21:40:09 +01:00
08a82c913a
Add mv as suggested in #20
2018-09-03 21:38:22 +01:00
508a06c14a
Add cp as suggested in #20
2018-09-03 21:33:24 +01:00
8f4b085807
Fix shuf YAML
2018-08-31 15:51:14 +02:00
6bfc58daab
Add notice about tcpdump traffic requirements
2018-08-31 11:29:36 +02:00
09564b427f
Add apt, apt-get, mysql and smbclient
...
Thanks to #20 .
2018-08-31 11:09:19 +02:00
5b18d9340a
Fix red YAML
2018-08-31 10:17:36 +02:00
cbab8b803a
Add red
...
Close #17 .
2018-08-27 16:27:12 +02:00
51acc5bc9b
Fix tcpdump sudo-enabled
2018-08-24 17:59:16 +01:00
1bff7d1525
Fix SUID for less and pg
2018-08-24 13:30:23 +02:00
38a5860d48
Add file-write to less
2018-08-24 12:32:06 +02:00
41bd75145c
Fix SUID for less and pg
...
Only file access is possible in that case.
2018-08-24 12:25:57 +02:00
e310b1f565
Fix more YAML
2018-08-24 12:08:37 +02:00
2b16dd52e8
Add nice, cpulimit and pg
2018-08-24 11:33:15 +02:00
e84ec807a1
Fix nmap suid-limited
2018-08-23 23:45:07 +01:00
8fb329ca92
Fix nmap suid-limited
2018-08-23 23:44:27 +01:00
0681eacca5
Add reverse and bind shell and file transfer functions to nmap
2018-08-23 18:29:50 +01:00
97c54f9b22
Fix nmap descriptions
2018-08-23 18:11:27 +02:00
d4b50275bb
Use DATA as a placeholder for file-write operations
2018-08-20 15:00:34 +02:00
866ca2e404
Fix other editors file write
2018-08-20 15:00:34 +02:00
b4b67ff10b
Fix ed file read/write
2018-08-20 15:00:34 +02:00
0ba5df0cb9
Use temporary files in zip functions
2018-08-19 11:32:48 +01:00
a68ef39e30
Standardize tcpdump temporary file creation
2018-08-19 11:24:13 +01:00
14c8781f2d
Fix nmap description and temporary file
2018-08-19 11:20:37 +01:00
f34aa31334
Remove docker interactive-execute
2018-08-19 11:14:16 +01:00
f740b410cc
Simplify zip and add suid-limited
2018-08-19 11:43:26 +02:00
2ff760e560
Fix and simplify tcpdump
2018-08-19 11:43:26 +02:00
acf29564cb
Simplify rsync and add interactive execute
2018-08-19 11:43:26 +02:00
7822ec33e8
Add suid, description and YAML fixes to nmap
2018-08-19 11:43:26 +02:00
c20ade4551
Make docker disposable, use sh instead of bash and add description
2018-08-19 11:43:26 +02:00
7219385a05
add new ways
2018-08-17 17:16:09 +02:00
6b73dcf283
Use the portable -u option for mktemp instead of removing the file
...
Close #15 .
2018-07-31 12:44:16 +02:00
53ad35fb10
Add suid-enabled and sudo-enabled to tftp
2018-07-22 18:24:39 +01:00
3469b03e78
Add sudo-enabled and suid-limited to socat
2018-07-22 15:49:15 +01:00
0f422cdd6a
Reorder functions in git, lua, and nc
2018-07-22 15:42:43 +01:00
38cd886b36
Describe which functions work with netcat traditional
2018-07-22 15:35:26 +01:00
fbd8a68cae
Add suid-limited and sudo-enabled to nc
2018-07-22 15:34:05 +01:00
4de0246992
Use double backtick for inline code
2018-07-22 15:22:03 +01:00
b016b7b9dd
Add suid-enabled and sudo-enabled to curl, dd, and wget
2018-07-22 14:30:03 +01:00
00a06edb07
Fix lua descriptions
2018-07-22 14:12:20 +01:00
ef92163d03
Add git
2018-07-22 14:06:54 +01:00
bfd61e93fc
Add lua
2018-07-22 12:47:57 +01:00
94f43fb943
Fix nc download description
2018-07-22 12:47:43 +01:00
e1cd3aed68
Fix YAMLs according to YAMLlint
2018-07-16 15:01:50 +02:00
a00f689760
Improve mount
2018-07-16 13:47:09 +02:00
e50f44521e
Improve crontab
2018-07-16 13:37:17 +02:00
85b99ce89f
added crontab and mount
2018-07-16 10:00:14 +02:00
d6895f367d
Reorder functions in binaries
2018-07-04 19:26:52 +01:00
80b20b6991
Add ruby download
2018-06-17 20:16:43 +01:00
401c469b26
Add versions requirements on PHP and ruby
2018-06-17 20:08:02 +01:00
50ffed4210
Replace more suid-limited execution with a suid-enabled read example
2018-06-17 11:39:42 +01:00
7fa5b1e16e
Use valid Mbox file for mail
2018-06-17 11:28:23 +01:00
06966c8cd4
Remove mail suid-limited
2018-06-17 11:27:03 +01:00
fce5a22341
Add sudo-enabled to cut
2018-06-16 16:13:16 +01:00
659002adef
Add cut
2018-06-16 14:28:28 +01:00
b3fc53a9d3
Remove invalid SUID execute from sed
2018-06-13 16:42:02 +02:00
2da69686ac
Fix sed execute and file write, also enforce standards
2018-06-13 16:05:57 +02:00
3c0e0bf1e3
Add execute-interactive & file-write to sed
2018-06-13 12:01:25 +02:00
0d786940c4
Add tar execute-non-interactive and file-read
2018-06-13 10:35:26 +02:00
69465eb338
Add expand, unexpand
2018-06-12 19:29:34 +01:00
4b11771fec
Avoid cat in bash
2018-06-12 16:17:34 +02:00
3b59c85656
Fix bash file read
2018-06-11 13:12:15 +02:00
7660674537
Add file-read to curl
2018-06-10 21:59:08 +01:00
2696bc3cde
Fix make compatibility issues
2018-06-04 20:00:09 +02:00
7e5bcab249
Replace where_to_save with file_to_save
2018-06-04 18:53:35 +01:00
6a747b0920
Fix PHP interactive functions
2018-06-04 18:40:46 +01:00
b2731c2c91
Fix make suid shell
2018-06-04 19:13:16 +02:00
564dbe28fa
Add base64, ltrace, make, sqlite3, time
2018-06-04 19:05:55 +02:00
81f12399fe
Add compatibility notice in make
2018-06-04 18:59:07 +02:00
c31a8a1b6b
Simplify make
2018-06-04 18:28:58 +02:00
4eff8b534f
Fix time description
2018-06-04 17:23:26 +02:00
b2a2dccc82
Add execute-interactive to sqlite3
2018-06-04 17:16:57 +02:00
323553f4b0
Make base64 portable
2018-06-04 14:59:57 +02:00
0785f116d3
Clarify echo command in rlwrap file-write
2018-06-04 13:16:24 +02:00
3cc3be5aa5
Use /dev/null as history for rlwrap
2018-06-04 13:09:55 +02:00
069e7da89d
Add sudo and suid to od
2018-06-04 13:01:44 +02:00
467e4e875d
Fix od YAML
2018-06-04 13:01:25 +02:00
669f8f0373
Inhibit actual locking in flock
2018-06-04 12:46:28 +02:00
5fa7efbc1c
Add base64, ltrace, make, sqlite3, time
2018-06-04 10:21:53 +00:00
3f8a62a253
Add flock, od, rlwrap
2018-06-03 20:22:08 +00:00
6e6cbb66a7
Remove non-interactive versions
2018-06-03 13:09:03 +01:00
1e443710a2
Add ProxyCommand executions to ssh
2018-06-03 13:09:03 +01:00
de8d657479
Fix typo in xargs
2018-06-03 12:30:34 +02:00
2463f9477a
Add xargs file-read even though it uses the external echo command
2018-06-03 11:51:44 +02:00
d14b69c12f
Add comment to puppet about diff
2018-06-03 11:41:27 +02:00
77edd09b07
Add output to puppet execute functions
2018-06-03 10:58:39 +02:00
6843fe84b5
Use consistent shell variable style in puppet
2018-06-03 10:30:07 +02:00
42997519e1
Fix sort file-read to avoid actually sorting lines
...
Thanks to @dubek.
2018-06-03 10:01:46 +02:00
b6dfe3e083
Add diff
2018-06-02 16:02:38 +01:00
234cfc0ebb
Add puppet description
2018-06-02 15:55:12 +01:00
144e51b165
Add puppet
2018-06-02 14:29:54 +02:00
b3c405e2d5
Add sudo and suid to nl
2018-06-01 13:30:32 +02:00
5a1c87e7c5
Fix YAML literal blocks
2018-06-01 12:44:34 +02:00
b96f6e9a49
Fix YAMLs format
2018-06-01 00:22:34 +02:00
bdf78c5e99
Add busybox
2018-05-31 20:09:44 +01:00
3a619c7777
Add whois
...
Thanks to https://twitter.com/info_dox/status/1001985728342102017
2018-05-31 20:24:56 +02:00
d95bc8a8dc
Fix coherence in nc YAML
2018-05-31 20:24:56 +02:00
ce034dd7b0
Clarify ul corruption
2018-05-31 12:37:44 +02:00
401486648a
Add sort, ul, uniq
2018-05-30 19:15:29 +01:00
1b5f2aedae
Rephrase ssh read
2018-05-30 19:07:49 +01:00
852407bb02
Add tee
2018-05-30 19:20:51 +02:00
5aee2ec17e
Add cat
2018-05-30 19:20:43 +02:00
66f60d7ef6
Use variables in dd
2018-05-30 12:56:08 +02:00
d937f2ba52
Use id as non-interactive command in php
2018-05-30 12:56:08 +02:00
bb001f1b8a
Add xargs, nl and unshare
2018-05-30 12:55:36 +02:00
ab481fa4a5
Reduce the number of leading spaces in nl and comment about it
2018-05-30 12:54:05 +02:00
0rbz
Emilio Pinna
Qazeer
Chris Frederick
s3krit
Andrea Cardaci
Hugo DELVAL
HugoDelval
g0tmi1k
egre55
Shaksham Jaiswal
Roman Mueller
George O
pshem
AlessandroZ
kk
Dov Murik