GTFOBins.github.io

GTFOBins.github.io copied to clipboard

abuses Easyrsa vars file (https://github.com/OpenVPN/easy-rsa/blob/master/doc/EasyRSA-Advanced.md)

jmrcsnchz

Adds an entry for qpdf, which can be used to read local files with sudo.

tehryanx

Output a file contents to stdout with make.

hamzawinix

Added techqniue allows using `qpdf` to read any arbitrary file. If `qpdf` can run as elevated user, this can be used to read sensitive files.

captain-woof

Add local file-read capabilite on aws binarie

pedrojosenavasperez

 In test case, the user with sudo rights to dnsmasq was able to execute the bash script using the intended --conf-script flag. Contents of test.sh ``` cp /root/flag.txt /tmp/flag.txt...

frostb1ten

I added `apport-cli`, which can be used to create a bug report, then view the report in a text editor, which may allow shell escapes and/or privileged file read/writes (Depending...

captain-woof

https://gtfobins.github.io/gtfobins/genisoimage/ ``` genisoimage -sort /flag ```

EsamLasheen

Nosferatuvjr

Adding setcap suid and sudo exploits

SofiaEngvall