Catalog GTFOBins

GTFO · Tool

clamscan

3 techniques LinuxGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation Linux

Each line of the file is interpreted as a path and the content is leaked via error messages. The output can optionally be cleaned using `sed`.

touch x.yara
clamscan --no-summary -d x.yara -f /path/to/input-file 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation Linux

Each line of the file is interpreted as a path and the content is leaked via error messages. The output can optionally be cleaned using `sed`.

touch x.yara
clamscan --no-summary -d x.yara -f /path/to/input-file 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read Linux

Each line of the file is interpreted as a path and the content is leaked via error messages. The output can optionally be cleaned using `sed`.

touch x.yara
clamscan --no-summary -d x.yara -f /path/to/input-file 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'
Context
unprivileged
Native
file-read
MITRE
T1005