File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11---
2+ comment: |-
3+ firejail is a sandboxing tool for Linux. It can be abused to spawn shells,
4+ read and write files outside the sandbox, and escalate privileges when misconfigured.
25functions:
36 file-read:
47 - code: |-
5- firejail --noprofile cat /path/to/input- file
8+ firejail --noprofile cat /path/to/file-input
69 contexts:
10+ sudo:
11+ suid:
712 unprivileged:
8- comment: |-
9- Reads arbitrary files by bypassing sandbox profiles.
1013 file-write:
1114 - code: |-
12- firejail --noprofile sh -c 'echo data > /path/to/output- file'
15+ firejail --noprofile sh -c 'echo data > /path/to/file-output '
1316 contexts:
17+ sudo:
18+ suid:
1419 unprivileged:
15- comment: |-
16- Writes arbitrary data to files outside the sandbox.
1720 shell:
1821 - code: |-
1922 firejail --noprofile /bin/sh
2023 contexts:
24+ sudo:
25+ suid:
2126 unprivileged:
22- comment: |-
23- Spawns an interactive shell outside of sandbox restrictions.
2427...
You can’t perform that action at this time.
0 commit comments