Skip to content

Latest commit

 

History

History
26 lines (14 loc) · 959 Bytes

README.md

File metadata and controls

26 lines (14 loc) · 959 Bytes

elevator

automated linux privesc in python

Technically built for doing privesc, this is a tool at its root simply allows you to transport any file inside of another, and have that file later output those other files. That was vague. Here's an example:

Take a simple python script to read and print out a file which contains b64-encoded data:

b64_decode.py

Here's an example of it running.

b64_run.png

This is then passed to our handy encoder tool, from which we get a nice ascii string representing that script:

ee.png

We can then take this string and place it in our delivery script, along with the arguments necessary to execute it automatically.

expl_in_file.png

When we then run our script, it decodes and decompresses the script(did I mention it's compressed to save space?), then runs it using our arguments:

elv_run.png