Catalog GTFOBins

GTFO · Tool

code

6 techniques LinuxGTFOBins GPL-3.0

download

File DownloadPrivilege Escalation Linux

This requires a valid GitHub account. Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.

code tunnel --name xxxxxx
Context
sudo
Native
download
MITRE
T1105

download

File Download Linux

This requires a valid GitHub account. Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.

code tunnel --name xxxxxx
Context
unprivileged
Native
download
MITRE
T1105

reverse-shell

Reverse/Bind ShellPrivilege Escalation Linux

This requires a valid GitHub account. Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.

code tunnel --name xxxxxx
Context
sudo
Native
reverse-shell

reverse-shell

Reverse/Bind Shell Linux

This requires a valid GitHub account. Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.

code tunnel --name xxxxxx
Context
unprivileged
Native
reverse-shell

upload

File UploadPrivilege Escalation Linux

This requires a valid GitHub account. Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.

code tunnel --name xxxxxx
Context
sudo
Native
upload
MITRE
T1041

upload

File Upload Linux

This requires a valid GitHub account. Run the command locally, then on the attacker box navigate to <https://github.com/login/device>, using the provided code to authorize the tunnel.

code tunnel --name xxxxxx
Context
unprivileged
Native
upload
MITRE
T1041