Argument injection via unzip
unzip unzip Sandbox: execFile · Timeout: 30s
system.file.write system.file.read Can be used to change the location the file is unzipped. In this example, the files are unzipped to /root/.
unzip -d /root/ archive.zip -d /tmp/ Can be used to read locate archives. The contents of the files and the filenames are shown.
unzip -c archive.zip Can be used to read locate archives. The contents of the files are shown.
unzip -p archive.zip GTFOArgs entry for unzip. This binary can be used to inject arguments for execution, file operations, or other capabilities.